Vendor
Wheels
11 known vulnerabilities.
Products
4 results · Clear filters · Feed
-
High 7.8
Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy …
-
High 8.1
Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to…
-
High 8.6
Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicC…
-
High 8.1
Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() …