Skip to content

Product

z-push/z-push-dev vulnerabilities

1 published CVE affecting z-push/z-push-dev, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest z-push/z-push-dev CVEs

Newest publication first

  1. CVE-2025-8264 z-push/z-push-dev SQL Injection Vulnerability

    Published
    CriticalCVSS 9.1 EPSS 0.45%

    Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.