Marginalia
Approved changes feed: RSS · Atom
cpe:2.3:a:marginalia_project:marginalia:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Marginalia Project (794ed3f9-36fb-507c-8dda-f9e79118e6a7) |
|---|---|
| Product | Marginalia (562b8fd4-6afe-561a-b5a7-6275b7d94b16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ruby-marginalia |
purl2cpe | 2026-06-01 10:16:22.850088 |
pkg:deb/ubuntu/ruby-marginalia |
purl2cpe | 2026-06-01 10:16:22.850091 |
pkg:gem/marginalia |
purl2cpe | 2026-06-01 10:16:22.850094 |
pkg:github/basecamp/marginalia |
purl2cpe | 2026-06-01 10:16:22.850097 |
pkg:rpm/opensuse/rubygem-marginalia |
purl2cpe | 2026-06-01 10:16:22.850099 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1010191 |
vulnerable | 2026-06-08 05:12:21.677955 |
Details available
marginalia < 1.6 is affected by: SQL Injection. The impact is: The impact is a injection of any SQL queries when a user controller argument is added as a component. The component is: Affects users that add a component that is user controller, for instance a parameter or a header. The attack vector is: Hacker inputs a SQL to a vulnerable vector(header, http parameter, etc). The fixed version is: 1.6.
Published: 2019-07-24T13:10:33.000Z
Updated: 2024-08-05T03:07:18.470Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.