Skip to content
OpenAdvisories

Vendor

Power-Components

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-65971 Public exploit

    Livewire PowerGrid: SQL Injection through the public `sortDirection` Livewire property in the `naturalSort` order-by path

    Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowi…