reactpress vulnerabilities

1 known vulnerability in reactpress from Fecommunity. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  reactpress: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-61685Sep 22, 2026Fecommunity

  ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query parameter names as SQL column identifiers (e.g. `` `article.${key}` ``). TypeORM