https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T18:48:29.009254+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2025-51506 fkie_cve-2025-51506 2026-11-06T18:48:29.028299+00:00

In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueKey parameter. This flaw enables any authenticated user to execute arbitrary SQL queries, via crafted payloads to valueKey to the api/smartlibrary/v2/en/dictionaries/options/lookup endpoint.

 https://db.gcve.eu/vuln/ghsa-7772-36fm-7v39 GHSA-7772-36fm-7v39 2026-11-06T18:48:29.028369+00:00

In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueKey parameter. This flaw enables any authenticated user to execute arbitrary SQL queries, via crafted payloads to valueKey to the api/smartlibrary/v2/en/dictionaries/options/lookup endpoint.