json-scada vulnerabilities

CVEs whose affected-version data names the json-scada package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-115328High· 8.8

today

JSON-SCADA before 0.65-alpha SQL Injection via OPC HistoryRead API

JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js that allows authenticated users to inject SQL via HistoryReadRequest parameters. Attackers can inject stacked statement…

▾ Twilightriclolsen · json-scadavia CVEORG