CVE-2022-23510
1 advisory.
npm/@cubejs-backend/api-gateway CVE-2022-23510: high 7.7
@cubejs-backend/api-gateway row level security bypass
Action: Upgrade @cubejs-backend/api-gateway to 0.31.24 or later.
npm i @cubejs-backend/api-gateway@0.31.24Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.31.23 | 0.31.24 | - |
Fixed versions
| 0.31.24 |
Sources
- osv: GHSA-6jqm-3c9g-pch7
- https://github.com/cube-js/cube.js/security/advisories/GHSA-6jqm-3c9g-pch7
- https://nvd.nist.gov/vuln/detail/CVE-2022-23510
- https://github.com/cube-js/cube.js/commit/3c614674fed6ca17df08bbba8c835ef110167570
- https://github.com/cube-js/cube.js/commit/f1140de508e359970ac82b50bae1c4bf152f6041
- https://github.com/cube-js/cube.js
CVE-2022-23510 · published · modified · JSON