~ / search / GHSA-9g9j-3w64-3cjh

GHSA-9g9j-3w64-3cjh

MoonShine SQL Injection Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-51510

Packages

EcosystemPackageAffectedFixed in
Packagist moonshine/moonshine <= 3.12.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

MoonShine v3.12.5 was discovered to contain a SQL injection vulnerability via the Data parameter under the Blog module.

References

External links from the advisory. They lead to third-party sites.