dbgate
dbgate 7.2.4 · pkgs/by-name/db/dbgate/package.nix
Health
Risk
risk 76 critical
- +60 7 open advisories
- +8 NIXPKGS-2026-2822 has a public exploit (CISA)
- +8 7.2.4 is behind upstream 7.3.2
Version
7.2.4 upstream 7.3.2
Channels
Hydra
succeeded 2d ago
Advisories
NIXPKGS-2026-2504 high 8.7 EPSS 0.6% DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid · #559819
CVE-2026-85176
NIXPKGS-2026-2821 medium 6.9 public exploit EPSS 0.8% dbgate Export databaseConnections.js exportModelSql path traversal · #568152
CVE-2026-101069
NIXPKGS-2026-2820 medium 6.9 public exploit EPSS 0.8% dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal · #568151
CVE-2026-101068
NIXPKGS-2026-2808 medium 6.9 public exploit EPSS 0.7% dbgate Files Endpoint runners.js files path traversal · #568139
CVE-2026-101070
NIXPKGS-2026-2822 medium 6.9 public exploit EPSS 0.7% dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal · #568153
CVE-2026-101067
NIXPKGS-2026-2812 medium 6.9 public exploit EPSS 0.7% dbgate Archive Link Creation archive.js createLink path traversal · #568143
CVE-2026-101066
NIXPKGS-2026-2750 EPSS 0.3% DbGate files-style Endpoint files.js fs.readFile path traversal · #566784
CVE-2026-97226
NIXPKGS-2026-1927 DbGate: Remote Code Execution via functionName injection in loadReader endpoint fixed in master needs backport to nixos-26.05
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 1
dbgate: 7.2.4 -> 7.3.1
#552710 by r-ryantm · opened 2mo ago · checks pass
Issues 0
None open.
Closed or merged in the synced window 1
DbGate: Remote Code Execution via functionName injection in loadReader endpoint 1.severity: security
#532253 by nixpkgs-security-tracker · closed 5w ago · 1 comments