SqlView API SQL Injection Vulnerability (CWE-89) in filter parameter with fix versions

github.com 2026-07-22查看中文 →

Security AdvisoryCriticalDHIS2

Affected:

dhis2-core 2.37
dhis2-core 2.38
dhis2-core 2.39
dhis2-core 2.40.x
dhis2-core 2.41.x before 2.40.11

Fixed in:

2.37-EOS
2.38-EOS
2.39-EOS
2.40.11.1
2.40.12

Referenced CVEs: CVE-2026-55084 · 8.8

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Command Injection (RCE) Vulnerability in llm_memory_mcp auto_capture MCP Action 2026-08-08 Command Injection (RCE) in adolfosalasgomez3011/slideshow-builder-mcp via OutputDir 2026-08-08 Command Injection in MIMICLab/mcp-pdf-vision with POC code 2026-08-08 MCPGateway Claude Usage Report Endpoint Command Injection (RCE) via since/until params 2026-08-08 Path Traversal in Hulupeep/mcp-ui-probe: Read/Write RCE via JourneyId and Filename 2026-08-08

Offline Archive

Offline screenshot & PDF are Pro-exclusive