Threats tagged 'ghsa-p3rg-2cmw-54f4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-116815OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated Medium5.32026-10-27GCVE DatabaseCVE-2026-116815 OpenPanel versions prior to 3.0.0 have an improper escaping vulnerability in the sankey.service.ts component. Authenticated project members can supply backslashes in event names to break ClickHouse string literals. This causes parse errors in the chart.sankey procedure, disabling the Sankey chart endpoint for the project. Report on CVE-2026-116815 Vulnerability CWE-116 #ghsa-p3rg-2cmw-54f4	GCVE Database	2026-10-27

Page 1 of 1