Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@cubejs-backend/api-gateway

2 known vulnerabilities (1 critical, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 critical, 1 medium
Registry
npm

Advisories 2

  • CVE-2023-50709Medium 6.5

    Denial of service attack on the cube-api endpoint

    Affected: fixed in 0.34.34.

  • CVE-2022-23510Critical 9.6

    SQl injection in cube-js

    Affected: from 0.31.23, fixed in 0.31.24.