VYPR
Vendor

Refinedev

Products
2
CVEs
1
Across products
2
Status
Private

Products

2

Recent CVEs

1
  • CVE-2026-92784HigSep 16, 2026
    risk 0.49cvss 7.5epss

    @refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code. Attackers controlling the data provider can inject malicious JavaScript through crafted JSON property names that execute in the developer's browser when…