FUXA SQL Injection vulnerability

CRITICAL 9.8CVE-2023-31719 · GHSA-p46g-8c3q-89p2 · Published 22/09/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
fuxa frangoteam	`≤ 1.1.12`	No fix yet
fuxa-server npm	`≤ 1.1.12`	No fix yet

Description

FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.

NVD description

FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.