GHSA-9j5g-78q4-mjh2

Опубликовано: 01 июл. 2026

Источник: github

Github: Не прошло ревью

CVSS4: 6.9

CVSS3: 9.8

Описание

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection.

This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection.

This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.

Ссылки

EPSS

Процентиль: 39%

0.00475

Низкий

6.9 Medium

CVSS4

9.8 Critical

CVSS3

CVE ID

CVE-2026-58521

Дефекты

CWE-89

Связанные уязвимости

CVE-2026-58521

CVSS3: 9.8

nvd

2 месяца назад

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.

EPSS

Процентиль: 39%

0.00475

Низкий

6.9 Medium

CVSS4

9.8 Critical

CVSS3

CVE ID

CVE-2026-58521

Дефекты

CWE-89