Threats tagged 'ghsa-x4x4-phr8-wp7p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.7	EPSS 0.5%	CVE-2026-92784@refinedev/inferencer · Code Injection High7.7EPSS 0.5%2026-09-16CVE Database V5CVE-2026-92784 @refinedev/inferencer versions up to 7.0.0 contain a code injection vulnerability due to improper escaping of API field names when generating JSX source code. This allows attackers who control the data provider to inject malicious JavaScript via crafted JSON property names, which executes in the developer's browser when the Inferencer page renders. EPSS 0.5%Vulnerability #ghsa-x4x4-phr8-wp7p	CVE Database V5	2026-09-16

Page 1 of 1