Skip to content
OpenAdvisories

Product · JawherKl

node-api-postgres

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-4191

    JawherKl node-api-postgres Profile Picture index.js path.extname unrestricted upload

    A flaw has been found in JawherKl node-api-postgres up to 2.5. Affected is the function path.extname of the file index.js of the component Profile Picture Handler. This manipulation causes unrestricted upload. The attack is possible to be carried out remotely…

    JawherKl node-api-postgres
  • High 7.3
    CVE-2026-4190

    JawherKl node-api-postgres user.js User.getAll sql injection

    A vulnerability was detected in JawherKl node-api-postgres up to 2.5. This impacts the function User.getAll of the file models/user.js. The manipulation of the argument sort results in sql injection. The attack can be executed remotely. The exploit is now pub…

    JawherKl node-api-postgres