CVE-2026-6216
1 advisory.
npm/dbgate-web CVE-2026-6216: low 3.5, EPSS 0.33%
DbGate has cross site scripting via the SVG Icon String Handler component
Action: Upgrade dbgate-web to 7.1.5 or later.
npm i dbgate-web@7.1.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.1.5 | - |
Fixed versions
| 7.1.5 |
Sources
- osv: GHSA-j8j5-7r4h-vj2g
- https://nvd.nist.gov/vuln/detail/CVE-2026-6216
- https://github.com/dbgate/dbgate
- https://github.com/dbgate/dbgate/releases/tag/v7.1.5
- https://vuldb.com/submit/785841
- https://vuldb.com/vuln/357135
- https://vuldb.com/vuln/357135/cti
CVE-2026-6216 · published · modified · JSON