https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:01:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-30450 EUVD-2026-30450 https://cve.radiocsirt.org/vuln/euvd-2026-30450 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39165 <p>Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the `SearchableTrait#scopeSearch()`. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator&#39;s password and session. The original repository of Cachet &lt;https://github.com/CachetHQ/Cachet&gt; is not active, the stable version 2.3.18 and it&#39;s developing 2.4 branch is affected.</p> <p>Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the `SearchableTrait#scopeSearch()`. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator&#39;s password and session. The original repository of Cachet &lt;https://github.com/CachetHQ/Cachet&gt; is not active, the stable version 2.3.18 and it&#39;s developing 2.4 branch is affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-39165 https://cve.radiocsirt.org/vuln/ghsa-79mg-4w23-4fqc <p><strong>Affected:</strong> Packagist: cachethq/cachet</p> <p>### Impact In Cachet versions through 2.3.18, there is a SQL injection which is in the `SearchableTrait#scopeSearch()`. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator&#39;s password and session.</p> <p>### Patches</p> <p>The original repository of [https://github.com/CachetHQ/Cachet](https://github.com/CachetHQ/Cachet) is not active, the stable version 2.3.18 and it&#39;s developing 2.4 branch is affected.</p> <p>Update to version 2.5 or later in the [https://github.com/fiveai/Cachet fork](https://github.com/fiveai/Cachet) to fix this vulnerability.</p> <p><strong>Affected:</strong> Packagist: cachethq/cachet</p> <p>### Impact In Cachet versions through 2.3.18, there is a SQL injection which is in the `SearchableTrait#scopeSearch()`. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator&#39;s password and session.</p> <p>### Patches</p> <p>The original repository of [https://github.com/CachetHQ/Cachet](https://github.com/CachetHQ/Cachet) is not active, the stable version 2.3.18 and it&#39;s developing 2.4 branch is affected.</p> <p>Update to version 2.5 or later in the [https://github.com/fiveai/Cachet fork](https://github.com/fiveai/Cachet) to fix this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-79mg-4w23-4fqc https://cve.radiocsirt.org/vuln/gsd-2021-39165 gsd-2021-39165 https://cve.radiocsirt.org/vuln/gsd-2021-39165