CVE-2026-47670
1 advisory.
npm/dbgate-api CVE-2026-47670: critical
Authenticated Remote Code Execution via loadReader functionName code injection in DbGate
Action: Upgrade dbgate-api to 7.1.9 or later.
npm i dbgate-api@7.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.1.9 | - |
Fixed versions
| 7.1.9 |
Sources
- osv: GHSA-wm5r-5qp3-5vxf
- https://github.com/dbgate/dbgate/security/advisories/GHSA-wm5r-5qp3-5vxf
- https://github.com/dbgate/dbgate
- https://github.com/dbgate/dbgate/releases/tag/v7.1.9
CVE-2026-47670 · published · modified · JSON