David-Crty Databasement
6 CVEs affecting David-Crty Databasement. Latest disclosed: 2026-11-04. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-108963 | High | 8.8 | 2026-10-11 | databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any… |
CVE-2026-121939 | High | 8.1 | 2026-11-04 | Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService::findOrCreateLocalUser() that links OIDC identities to local users b… |
CVE-2026-95654 | High | 7.4 | 2026-09-22 | Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization decision without re-checking token validi… |
CVE-2026-103534 | Medium | 6.3 | 2026-10-01 | A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/… |
CVE-2026-111875 | Medium | 4.7 | 2026-10-18 | A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests… |
CVE-2026-103533 | Medium | 4.1 | 2026-10-01 | A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/… |