lucid vulnerabilities

1 known vulnerability in lucid from Adonisjs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  lucid: Improperly Controlled Modification of Dynamically-Determined Object Attributes

  CVE-2026-22814Jan 13, 2026Adonisjs

  @adonisjs/lucid is an SQL ORM for AdonisJS built on top of Knex. Prior to 21.8.2 and 22.0.0-next.6, there is a Mass Assignment vulnerability in AdonisJS Lucid which may allow a remote attacker who can influence data that is passed into Lucid model assignments