Skip to content
OpenAdvisories

Vendor

LMFDB

1 known vulnerabilities.

Products

LMFDB 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-123198

    LMFDB before commit 01829bd Unauthenticated Server-Side Template Injection via /knowledge/render/<ID>

    LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that allows unauthenticated attackers to inject Jinja expressions via request parameters. Attackers can supply crafted query-string values or 'con…

    LMFDB LMFDB