https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 10:22:25 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-124850 <p>A SQL injection vulnerability exists in a database migration script in flowintel.</p> <p>The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious identifier value into the affected tables can cause arbitrary SQL execution when the migration is subsequently run during an application upgrade.</p> <p>- Requires prior write access to the database to plant a malicious identifier value - Triggered automatically during a migration or upgrade operation - Can result in unauthorized data disclosure, modification, or deletion</p> <p>Affected versions: flowintel prior to 4.0.0</p> <p>A SQL injection vulnerability exists in a database migration script in flowintel.</p> <p>The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious identifier value into the affected tables can cause arbitrary SQL execution when the migration is subsequently run during an application upgrade.</p> <p>- Requires prior write access to the database to plant a malicious identifier value - Triggered automatically during a migration or upgrade operation - Can result in unauthorized data disclosure, modification, or deletion</p> <p>Affected versions: flowintel prior to 4.0.0</p> https://db.gcve.eu/vuln/fkie_cve-2026-124850 https://db.gcve.eu/vuln/gcve-1-2026-20156 <p><strong>Affected:</strong> flowintel</p> <p>A SQL injection vulnerability exists in a database migration script in flowintel.</p> <p>The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious identifier value into the affected tables can cause arbitrary SQL execution when the migration is subsequently run during an application upgrade.</p> <p>- Requires prior write access to the database to plant a malicious identifier value - Triggered automatically during a migration or upgrade operation - Can result in unauthorized data disclosure, modification, or deletion</p> <p>Affected versions: flowintel prior to 4.0.0</p> <p><strong>Affected:</strong> flowintel</p> <p>A SQL injection vulnerability exists in a database migration script in flowintel.</p> <p>The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious identifier value into the affected tables can cause arbitrary SQL execution when the migration is subsequently run during an application upgrade.</p> <p>- Requires prior write access to the database to plant a malicious identifier value - Triggered automatically during a migration or upgrade operation - Can result in unauthorized data disclosure, modification, or deletion</p> <p>Affected versions: flowintel prior to 4.0.0</p> https://db.gcve.eu/vuln/gcve-1-2026-20156 https://db.gcve.eu/vuln/ghsa-29rj-4jqp-xhr4 <p>A SQL injection vulnerability exists in a database migration script in flowintel.</p> <p>The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious identifier value into the affected tables can cause arbitrary SQL execution when the migration is subsequently run during an application upgrade.</p> <p>- Requires prior write access to the database to plant a malicious identifier value - Triggered automatically during a migration or upgrade operation - Can result in unauthorized data disclosure, modification, or deletion</p> <p>Affected versions: flowintel prior to 4.0.0</p> <p>A SQL injection vulnerability exists in a database migration script in flowintel.</p> <p>The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious identifier value into the affected tables can cause arbitrary SQL execution when the migration is subsequently run during an application upgrade.</p> <p>- Requires prior write access to the database to plant a malicious identifier value - Triggered automatically during a migration or upgrade operation - Can result in unauthorized data disclosure, modification, or deletion</p> <p>Affected versions: flowintel prior to 4.0.0</p> https://db.gcve.eu/vuln/ghsa-29rj-4jqp-xhr4