GHSA-p46g-8c3q-89p2

GitHub Security Advisory

FUXA SQL Injection vulnerability

✓ GitHub Reviewed CRITICAL Has CVE

FUXA <= 1.1.12 is vulnerable to SQL Injection via `/api/signin`.

npm fuxa-server

Affected versions: 0 (last affected: 1.1.12)

CVE-2023-31719

GHSA ID

GHSA-p46g-8c3q-89p2

Published

September 22, 2023 12:30 AM

Last Modified

September 25, 2023 9:42 PM

CVSS Score

9.0 /10

Primary Ecosystem

npm

Primary Package

fuxa-server

GitHub Reviewed

✓ Yes

Last updated: July 31, 2025 6:07 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.