sqlpad vulnerabilities and fixes
Recent CVEs affecting sqlpad, with upgrade or downgrade steps. 1 tracked.
sqlpad has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-03-15. Highest priority: CVE-2022-0944 (score 54/100).
- CVE-2022-0944 HIGH 7.2 UPGRADE Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1
FAQ
How do I fix sqlpad vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sqlpad being exploited right now?
None of the tracked sqlpad CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sqlpad CVE should I patch first?
CVE-2022-0944 currently ranks highest (54/100): Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.