Pig-mesh

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 6
    Known Exploited: 0
    3
    Critical Level Threats
    0
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-115997

    pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection

    Last Modified: Oct 29, 2026
    Published: Oct 24, 2026

    CVE-2026-111343

    pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id}

    Last Modified: Oct 23, 2026
    Published: Oct 15, 2026

    CVE-2026-91995

    pig before 4.1.0 Unverified Password Change via /register/password

    Last Modified: Sep 18, 2026
    Published: Sep 15, 2026

    CVE-2026-15512

    pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection

    Last Modified: Jul 13, 2026
    Published: Jul 12, 2026

    CVE-2025-63691

    In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface (/api/admin/sys-token/page) has an improper permission verification issue, which leads to information leakage. This interface can be called by any user who has completed login authentication, and it returns the plaintext authentication Tokens of all users currently logged in to the system. As a result, ordinary users can obtain the administrator's authentication Token through this interface, thereby forging an administrator account, gaining the system's management permissions, and taking over the system.

    Last Modified: Dec 08, 2025
    Published: Nov 07, 2025
    Items Per Page
    Pig-Mesh Vulnerabilities & Security CVEs | CVE-DB