jeecgai/JeecgBoot

GitHub

github.com

jeecg.com

Releases77

Frequency1 month 16 hours

Last Release6 months ago

【AI低代码平台】AI low-code platform empowers enterprises to quickly develop low-code solutions and build AI applications. 助力企业快速实现低代码开发和构建AI应用！ AI应用平台涵盖：AI应用、AI模型、AI聊天助手、知识库、AI流程编排、MCP和插件，聊天式业务操作等。强大代码生成器：实现前后端一键生成，无需手写代码! 显著提升效率节省成本，又不失灵活~

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2026-7290NVD↗	—	Apr 28, 2026Tuesday, 28 April 2026, 19:37	6.3 MEDIUM	6.5 MEDIUM
A vulnerability was determined in JeecgBoot up to 3.9.1. Impacted is the function SqlInjectionUtil of the file jeecg-boot/jeecg-boot-base-core/src/main/java/org/jeecg/common/util/SqlInjectionUtil.java of the component loadDict Endpoint. This manipulation of the argument keyword causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Patch name: a9c8e8eb1185751c4c3c68d2a53f3dadee9edc6b. To fix this issue, it is recommended to deploy a patch.
CVE-2023-34602NVD↗	<= 3.5.1	Jun 19, 2023Monday, 19 June 2023, 06:15	7.5 HIGH	—
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.
CVE-2023-34603NVD↗	<= 3.5.1	Jun 19, 2023Monday, 19 June 2023, 06:15	7.5 HIGH	—
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.