CyberSecBulletin

Refinedev vulnerabilities

We track 1 vulnerability in Refinedev products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Refinedev vulnerabilities

  • 7.5 High severity

    @refinedev/inferencer: Improper Control of Generation of Code

    CVE-2026-92784Refinedev

    @refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code. Attackers controlling the data provider can inject malicious JavaScript through crafted JSON property names that execute in the develope