Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
refinedev records in CISA KEVNo refinedev vulnerabilities are listed in CISA KEV.
Priority LOW 36
@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code.
CVSS 4.0HIGH 7.7· Network · No auth · User interaction · EPSS 0.00477 · Published 2026-09-16 · No fix listed CWE-94
Open these records in search →