CVE-2026-28805
1 advisory.
Packagist/devcode-it/openstamanager CVE-2026-28805: high 8.8
OpenSTAManager has a Time-Based Blind SQL Injection via `options[stato]` Parameter
Action: Upgrade devcode-it/openstamanager to 2.10.2 or later.
composer require devcode-it/openstamanager:2.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.2 | - |
Fixed versions
| 2.10.2 |
Sources
- osv: GHSA-3gw8-3mg3-jmpc
- https://github.com/devcode-it/openstamanager/security/advisories/GHSA-3gw8-3mg3-jmpc
- https://nvd.nist.gov/vuln/detail/CVE-2026-28805
- https://github.com/devcode-it/openstamanager/commit/50b9089c506ba2ca249afb1dfead2af5d42c10e7
- https://github.com/devcode-it/openstamanager/commit/679c40fa5b3acad4263b537f367c0695ff9666dc
- https://github.com/devcode-it/openstamanager
- https://github.com/devcode-it/openstamanager/releases/tag/v2.10.2
CVE-2026-28805 · published · modified · JSON