aipexbase vulnerabilities

CVEs whose affected-version data names the aipexbase package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111718Medium· 6.5PoC

yesterday

AipexBase through commit 690adb9 SQL Injection via /api/data/invoke

AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the order_by and group_by fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UP…

▾ Twilightkuafuai · aipexbasevia CVEORG