1vulnerability
- Critical1 (100.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
dbgate-serve
Ecosystem: npm
Downloads: 3.65 K
- 1CriticalAffects 1 version
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 1 vulnerabilities
- Critical: 1
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting dbgate-serve, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| GHSA-8v3q-9vmx-36vc | Critical | DbGate: Unauthenticated Remote Code Execution via JSON Script Runner### Summary DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `functionName` parameter of JSON script `assign` commands. The `functionName` value is interpolated directly into dynamically generated JavaScript source code via string concatenation. The generated code is then executed in a forked Node.js child process. ### Details #### Step 1: User Input Entry Point **File:** `packages/api/src/controllers/runners.js` - `start()` method The `/runners/start` endpoint accepts a POST body containing a `script` object. When `script.type == 'j |
| GitHub (opens in a new tab) |
- GHSA-8v3q-9vmx-36vcCriticalDbGate: Unauthenticated Remote Code Execution via JSON Script Runner
< 7.1.9
### Summary DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `functionName` parameter of JSON script `assign` commands. The `functionName` value is interpolated directly into dynamically generated JavaScript source code via string concatenation. The generated code is then executed in a forked Node.js child process. ### Details #### Step 1: User Input Entry Point **File:** `packages/api/src/controllers/runners.js` - `start()` method The `/runners/start` endpoint accepts a POST body containing a `script` object. When `script.type == 'j
CVE: CVE-2026-47668