Medium severity5.5NVD Advisory· Published Jan 6, 2023· Updated Jun 17, 2026

CVE-2018-25066

Description

A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. It is recommended to upgrade the affected component. VDB-217554 is the identifier assigned to this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
nodebatisnpm	< 2.2.0	2.2.0

Affected products

Nodebatis Project/Nodebatis
cpe:2.3:a:nodebatis_project:nodebatis:*:*:*:*:*:*:*:*
Range: <2.2.0
ghsa-coords
pkg:npm/nodebatis
Range: < 2.2.0
Petermu/Nodebatisv5
Range: 2.0

Patches

Vulnerability mechanics

References

github.com/PeterMu/nodebatis/commit/6629ff5b7e3d62ad8319007a54589ec1f62c7c35nvdPatchWEB
github.com/advisories/GHSA-8ph8-9q2j-c3rqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-25066ghsaADVISORY
vuldb.comnvdThird Party AdvisoryWEB
vuldb.comnvdThird Party AdvisoryWEB
github.com/PeterMu/nodebatis/releases/tag/v2.2.0nvdRelease NotesWEB

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000