Filtered by vendor Power-components
Subscriptions
Filtered by product Livewire-powergrid
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-65971 | 1 Power-components | 1 Livewire-powergrid | 2026-11-13 | 7.6 High |
| Livewire PowerGrid creates data tables based on Laravel Livewire library. From version 6.0.0 to before version 6.10.4, the public Livewire property sortDirection is interpolated verbatim into a raw SQL ORDER BY clause and is not restricted to asc/desc, allowing arbitrary SQL injection through POST /livewire/update. This issue has been patched in version 6.10.4. | ||||
Page 1 of 1.