Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-15562
9.8
CRITICALCVSS v3
Published
August 26, 2019
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects trusted SQL fragments is a vulnerability in the application, not in Gorm
GitHub