Threats tagged 'ghsa-pghv-w792-qvjg'

CVE-2026-8114 is a SQL injection vulnerability in JeecgBoot up to version 3.9.1. It affects the JSON Object Handler component, specifically the /sys/dict/loadTreeData file, where manipulation of the 'condition' argument can lead to SQL injection. The vulnerability can be exploited remotely. The vendor has indicated that this issue should have been fixed in recent updates.