@refinedev/inferencer vulnerabilities

CVEs whose affected-version data names the @refinedev/inferencer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92784High· 7.5

1w ago

@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code

@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code. Attackers controlling the data provider can inject malicious JavaScript through crafted JSON property names that …

▾ Twilightrefinedev · @refinedev/inferencerEPSS 0.48%via NVD