| Package | Affected versions | Patched versions |
|---|---|---|
| jsherp | < 2025-08-07 | 2025-08-07 |
Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free