Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-38528
7.1
HIGHCVSS v3
Published
April 14, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDataGrid.php.
krayin/laravel-crm
GitHubFree & Opensource Laravel CRM solution for SMEs and Enterprises for complete customer lifecycle management.
GitHubFree & Opensource Laravel CRM solution for SMEs and Enterprises for complete customer lifecycle management.NVD