JawherKl vulnerabilities
We track 2 vulnerabilities in JawherKl products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 16, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest JawherKl vulnerabilities
- 7.3 High severity
node-api-postgres: Improper Access Control
A flaw has been found in JawherKl node-api-postgres up to 2.5. Affected is the function path.extname of the file index.js of the component Profile Picture Handler. This manipulation causes unrestricted upload. The attack is possible to be carried out remotely.
- 7.3 High severity
node-api-postgres: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in JawherKl node-api-postgres up to 2.5. This impacts the function User.getAll of the file models/user.js. The manipulation of the argument sort results in sql injection. The attack can be executed remotely. The exploit is now publ