CVE-2026-48017
1 advisory.
npm/dbgate-api CVE-2026-48017: high 8.8
DbGate: Remote Code Execution via functionName injection in loadReader endpoint
Action: Upgrade dbgate-api to 7.1.9 or later.
npm i dbgate-api@7.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.1.9 | - |
Fixed versions
| 7.1.9 |
Sources
- osv: GHSA-hv83-ggc4-v385
- https://github.com/dbgate/dbgate/security/advisories/GHSA-hv83-ggc4-v385
- https://nvd.nist.gov/vuln/detail/CVE-2026-48017
- https://github.com/dbgate/dbgate
- https://github.com/dbgate/dbgate/releases/tag/v7.1.9
CVE-2026-48017 · published · modified · JSON