Skip to main content
VulnerabilityPublished

Flyway: Security exception

Affects flywaySource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Patch
Available – fixed in ce65ee118f01f1792aa46129a3f07cc746c6c6b9

Data as of 27 Oct 2026, 00:07 UTC

What to do

Upgrade flyway to ce65ee118f01f1792aa46129a3f07cc746c6c6b9.

Affected software

ProductAffectedFixed in
OSS-Fuzzflywaypkg:generic/flywayOther threatsAffected
  • >=7c3ea883c0b78fd0aff1c69275cf3c0945eb6017 <ce65ee118f01f1792aa46129a3f07cc746c6c6b9
  • =flyway-12.5.0
Fixed in
  • ce65ee118f01f1792aa46129a3f07cc746c6c6b9

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available and has been applied in the commit ce65ee118f01f1792aa46129a3f07cc746c6c6b9. Users should update to this fixed version to remediate the vulnerability.

Description

A security exception vulnerability was identified in Flyway related to the RegexInjection sanitizer's hookInternal method. The issue was reported by OSS-Fuzz and involves a crash in the patternHook during location parsing. A fix has been implemented in a specific commit.

References

Community reviews

Loading reviews…