Skip to content
OpenAdvisories

Product · t8y2

dbx

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-55642

    dbx: Unauthenticated arbitrary SQL execution in dbx-web (authentication fails open when no password is configured)

    dbx is a cross-platform database client for databases. Prior to 0.5.51, dbx-web auth_middleware in crates/dbx-web/src/auth.rs passes every protected request to the handler chain when password_hash is None. A fresh deployment reaches that state when DBX_PASSWO…

    t8y2 dbx