TI-2019-15539 CVE-2019-25486 · GHSA-q8hg-mrch-vx5cVarient 1.6.1 SQL Injection via user_id ParameterPriority HIGH 77Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user_id parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.0038 · Published 2026-03-11 · No fix listed CWE-89