{"action":"Upgrade dbgate-web to 7.1.5 or later.","affected":[{"fixed":"7.1.5","introduced":"7.0.0"}],"component":"dbgate-web","cve_ids":["CVE-2026-34725"],"ecosystem":"npm","epss":0.00175,"exploited":false,"fixed_versions":["7.1.5"],"ghsa_id":"GHSA-35xm-qvjg-8m42","id":"tcs_01M5KEW4CA9H76R1WC0XNGE88J","modified_at":"2026-04-06T17:39:23.866361Z","published_at":"2026-04-01T22:19:57Z","references":["https://osv.dev/vulnerability/GHSA-35xm-qvjg-8m42","https://github.com/dbgate/dbgate/security/advisories/GHSA-35xm-qvjg-8m42","https://nvd.nist.gov/vuln/detail/CVE-2026-34725","https://github.com/dbgate/dbgate/commit/a7d2ed11f3f3d4dfb5d2e4e5467dedafa5fa947e","https://github.com/dbgate/dbgate","https://github.com/dbgate/dbgate/releases/tag/v7.1.5"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-35xm-qvjg-8m42","url":"https://osv.dev/vulnerability/GHSA-35xm-qvjg-8m42"}],"summary":"dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration"}