reactpress vulnerabilities

CVEs whose affected-version data names the reactpress package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61685High· 7.5

yesterday

ReactPress is a publishing system for React developers

ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query parameter names as SQL column identifiers (e.g. `` `articl…

▾ Twilightfecommunity · reactpressvia NVD