Поиск уязвимостей
Количество 3
Количество 3
CVE-2019-15562
GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects trusted SQL fragments is a vulnerability in the application, not in Gorm
GHSA-r28r-5q2m-wh2x
GORM before 1.9.10 allows SQL injection via incomplete parentheses.
ALT-PU-2020-4260
ALT-PU-2020-4260: package `golang-github-jinzhu-gorm` update to version 1.9.15-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-15562 GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects trusted SQL fragments is a vulnerability in the application, not in Gorm | CVSS3: 9.8 | 2% Низкий | около 7 лет назад |
| GHSA-r28r-5q2m-wh2x GORM before 1.9.10 allows SQL injection via incomplete parentheses. | CVSS3: 9.8 | 2% Низкий | больше 4 лет назад |
| ALT-PU-2020-4260 ALT-PU-2020-4260: package `golang-github-jinzhu-gorm` update to version 1.9.15-alt1 | CVSS3: 9.8 | 2% Низкий | больше 6 лет назад |
Уязвимостей на страницу