Critical severity9.8NVD Advisory· Published Jul 1, 2026· Updated Jul 7, 2026
CVE-2026-58521
CVE-2026-58521
Description
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection.
This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.
Affected products
2- Range: <1.43.9, 1.44.6, 1.45.4
Patches
Vulnerability mechanics
References
2- phabricator.wikimedia.org/T428274nvdPatchVendor Advisory
- gerrit.wikimedia.org/r/c/1298854nvdIssue Tracking
News mentions
0No linked articles in our index yet.