Packagist/billabear/billabear CVE-2026-31069: high 8.8, EPSS 0.48%
BillaBear is Vulnerable to SQL Injection in the EventRepository
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2025.01.03 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xp6r-8pcc-xv5p
- https://nvd.nist.gov/vuln/detail/CVE-2026-31069
- https://gist.github.com/nedlir/2377ba6e7fa2ad957210b52aa8e400d9
- https://gist.github.com/nedlir/a50725b94650467f0593b8f4009ae19e
- https://github.com/billabear/billabear
CVE-2026-31069 · published · modified · JSON