VYPR

FileCatalog DatasetManager

by Diracgrid

CVEs (1)

  • CVE-2026-61667criJul 13, 2026
    risk 0.59cvss epss

    ### Summary The FileCatalog DatasetManager runs a query on the database and passes the result to eval. The SQL query contains an injection vulnerability which allows an authenticated user to control the parameter returned to the eval resulting in remote code execution. ###…