Description
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Exposed | < 1.5.1 | 1.5.1 |
Critical · 9.8
CVE-2026-108474
EUVD-2026-96025GHSA-cv5g-jv44-53r2
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
Published Oct 9, 2026 · Updated Oct 12, 2026 · Assigned by JetBrains