soko vulnerabilities

2 known vulnerabilities in soko from Gentoo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  soko: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-28424Mar 20, 2023GentooEPSS 1.15%

  Soko if the code that powers packages.gentoo.org. Prior to version 1.0.2, the two package search handlers, `Search` and `SearchFeed`, implemented in `pkg/app/handler/packages/search.go`, are affected by a SQL injection via the `q` parameter. As a result, unaut

• 9.1 Critical severity

  soko: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-26033Feb 25, 2023Gentoo

  Gentoo soko is the code that powers packages.gentoo.org. Versions prior to 1.0.1 are vulnerable to SQL Injection, leading to a Denial of Service. If the user selects (in user preferences) the "Recently Visited Packages" view for the index page, the value of th