| Package | Affected versions | Patched versions |
|---|---|---|
| openreplay | < 1.20.0 | 1.20.0 |
OpenReplay is a self-hosted session replay suite. Prior to version 1.20.0, the POST /{projectId}/cards/search endpoint has a SQL injection in the sort.field parameter. This issue has been patched in version 1.20.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free