Z-push/z-push-dev vulnerabilities
We track 1 vulnerability in Z-push/z-push-dev products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2025.
1vulnerabilities
1critical
0high
0exploited
9.0average CVSS score
Latest Z-push/z-push-dev vulnerabilities
- 9.0 Critical severity
z-push/z-push-dev: Improper Neutralization of Special Elements used in an SQL Command
Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the att