GHSA-3fhj-wpvj-x5w8
laravel-jqgrid vulnerable to SQL Injection
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | mgallegos/laravel-jqgrid | <= 1.3.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php. The manipulation leads to sql injection. The name of the patch is fbc2d94f43d0dc772767a5bdb2681133036f935e. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216271.
References
External links from the advisory. They lead to third-party sites.