{"id":"EUVD-2025-27177","enisaUuid":"e1229e00-4673-32e1-8079-b6282abc50ef","description":"pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database. SQL injection is possible in versions prior to 2.0.0-rc3. The validation present in versions prior to 2.0.0-rc3 does not provide adequate protection from injection attempts. Version 2.0.0-rc3 contains a patch to mitigate such attempts.","datePublished":"Sep 8, 2025, 9:35:01 PM","dateUpdated":"Sep 9, 2025, 1:30:44 PM","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/prest/prest/security/advisories/GHSA-p46v-f2x8-qp98\nhttps://github.com/prest/prest/commit/47d02b87842900f77d76fc694d9aa7e983b0711c\n","aliases":"CVE-2025-58450\nGHSA-p46v-f2x8-qp98\n","assigner":"GitHub_M","epss":0.44,"enisaIdProduct":[{"id":"a6863792-4261-37fd-9f11-4ed792ee0d5b","product":{"name":"prest","vendor":{"name":"prest"}},"product_version":"\u003c 2.0.0-rc3"}],"enisaIdVendor":[{"id":"61257d3a-0e83-3358-81af-42f8d5db26d4","vendor":{"name":"prest"}}],"enisaIdVulnerability":[{"id":"b8babe64-3b5a-3bf8-a9bd-f3ac41e12c65","vulnerability":{"id":"CVE-2025-58450","description":"pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database. SQL injection is possible in versions prior to 2.0.0-rc3. The validation present in versions prior to 2.0.0-rc3 does not provide adequate protection from injection attempts. Version 2.0.0-rc3 contains a patch to mitigate such attempts.","datePublished":"Sep 8, 2025, 9:35:01 PM","dateUpdated":"Sep 9, 2025, 1:30:44 PM","status":"PUBLISHED","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/prest/prest/security/advisories/GHSA-p46v-f2x8-qp98\nhttps://github.com/prest/prest/commit/47d02b87842900f77d76fc694d9aa7e983b0711c\n","enisa_id":"EUVD-2025-27177\n","assigner":"GitHub_M","epss":0.44,"dataProcessed":"Nov 4, 2026, 7:13:56 AM","vulnerabilityProduct":[{"id":"940dd166-f918-47bc-8f68-bcb50d895280","product":{"name":"prest","vendor":{"name":"prest"}},"product_version":"\u003c 2.0.0-rc3"},{"id":"a97a3f98-521e-3868-a1bb-9c0c20f25fd8","product":{"name":"prest","vendor":{"name":"prest"}},"product_version":"\u003c 2.0.0-rc3"}],"vulnerabilityVendor":[{"id":"4197f5b2-dfac-356e-b563-8ef764056865","vendor":{"name":"prest"}}]}},{"id":"cb3d1fc5-99f2-367f-933d-e76558f87a23","vulnerability":{"id":"GHSA-p46v-f2x8-qp98","description":"pREST has a Systemic SQL Injection Vulnerability","datePublished":"Sep 8, 2025, 9:48:26 PM","dateUpdated":"Sep 10, 2025, 9:05:26 PM","baseScore":0.0,"references":"https://github.com/prest/prest/security/advisories/GHSA-p46v-f2x8-qp98\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-58450\nhttps://github.com/prest/prest/commit/47d02b87842900f77d76fc694d9aa7e983b0711c\nhttps://github.com/prest/prest\n","enisa_id":"EUVD-2025-27177\n","aliases":"GHSA-p46v-f2x8-qp98\nCVE-2025-58450\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:12:52 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"75a23847-571a-3611-ad4f-5b65fb6d378c","advisory":{"id":"openSUSE-SU-2025:15564-1","description":"govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media","datePublished":"Sep 18, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:42:03 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15564-1.json\nhttps://www.suse.com/security/cve/CVE-2025-4953/\nhttps://www.suse.com/security/cve/CVE-2025-54123/\nhttps://www.suse.com/security/cve/CVE-2025-54376/\nhttps://www.suse.com/security/cve/CVE-2025-58058/\nhttps://www.suse.com/security/cve/CVE-2025-58063/\nhttps://www.suse.com/security/cve/CVE-2025-58157/\nhttps://www.suse.com/security/cve/CVE-2025-58158/\nhttps://www.suse.com/security/cve/CVE-2025-58430/\nhttps://www.suse.com/security/cve/CVE-2025-58437/\nhttps://www.suse.com/security/cve/CVE-2025-58445/\nhttps://www.suse.com/security/cve/CVE-2025-58450/\nhttps://www.suse.com/security/cve/CVE-2025-59358/\nhttps://www.suse.com/security/cve/CVE-2025-59359/\nhttps://www.suse.com/security/cve/CVE-2025-59360/\nhttps://www.suse.com/security/cve/CVE-2025-59361/\nhttps://www.suse.com/security/cve/CVE-2025-7445/\nhttps://www.suse.com/security/cve/CVE-2025-8396/\nhttps://www.suse.com/security/cve/CVE-2025-9072/\nhttps://www.suse.com/security/cve/CVE-2025-9076/\nhttps://www.suse.com/security/cve/CVE-2025-9078/\nhttps://www.suse.com/security/cve/CVE-2025-9084/\n","aliases":"CVE-2025-4953\nCVE-2025-54123\nCVE-2025-54376\nCVE-2025-58058\nCVE-2025-58063\nCVE-2025-58157\nCVE-2025-58158\nCVE-2025-58430\nCVE-2025-58437\nCVE-2025-58445\nCVE-2025-58450\nCVE-2025-59358\nCVE-2025-59359\nCVE-2025-59360\nCVE-2025-59361\nCVE-2025-7445\nCVE-2025-8396\nCVE-2025-9072\nCVE-2025-9076\nCVE-2025-9078\nCVE-2025-9084\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1cc76f98-371a-3fc6-aee6-5eadf51878a2","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"29107cb4-f129-3481-ac9b-db60712e7317","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"29cdf64b-9d51-3131-8329-d2fe15008bbb","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"2e830e5b-5857-3f97-a80c-b3a30b97b6c2","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"610e85a2-a76d-3b52-ae27-3bf4aba41ec0","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"736c93eb-17d0-3c0d-9744-877b4b8ffc8d","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"ea17cf9d-e8f0-3a74-b23c-845080a781c5","product":{"name":"govulncheck-vulndb-0:0.0.20250917T170349-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fb90779c-62f0-353d-b846-d907b8a69a19","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ff6a651c-8c7a-3ba4-be7f-c1564c968489","product":{"name":"govulncheck-vulndb-0.0.20250917T170349-1.1.s390x","vendor":{"name":"SUSE"}}}]}}]}