Skip to content
OpenAdvisories

Vendor

Wheels

11 known vulnerabilities.

4 results · Clear filters · Feed

  • High 7.8

    Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy …

  • High 8.1

    Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to…

  • High 8.6

    Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicC…

  • High 8.1

    Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() …