TI-2026-80122 CVE-2026-115997 · GHSA-76h3-gxx4-8m4v
SQL injection in pig-mesh pig via ascs and descs arguments
Priority MEDIUM 57
A flaw has been found in pig-mesh pig up to 4.1.0.
pig-mesh
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
pig-mesh records in CISA KEVNo pig-mesh vulnerabilities are listed in CISA KEV.
Records
4 records
Priority MEDIUM 57
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/{id}.
TI-2026-13051 CVE-2026-15512 · GHSA-5qr2-jcjw-v3xc
pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection
Priority MEDIUM 57
A vulnerability was identified in pig-mesh Pig up to 3.9.2.
TI-2026-62125 CVE-2026-91995 · GHSA-7g92-2j5x-mj6h
pig before 4.1.0 Unverified Password Change via /register/password
Priority MEDIUM 50
pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password.