Threats affecting pkg:maven/io.github.erupts/erupt

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-124504erupts erupt · SQL Injection Medium5.32026-11-09CVE Database V5CVE-2026-124504 CVE-2026-124504 is a SQL injection vulnerability in the erupts erupt product up to version 2.3.0. The flaw exists in the ReportService.queryBiData function within ReportService.java, where manipulation of the 'sort' argument can lead to SQL injection. This vulnerability can be exploited remotely without user interaction. A public exploit is available. Upgrading to version 2.4.0 resolves the issue. Vulnerability	CVE Database V5	2026-11-09

Page 1 of 1