Matthewrubin Local Magic vulnerabilities
2 known vulnerabilities affecting matthewrubin/local_magic.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2025-32636P2CRITICALCVSS 9.3≤ 2.9.02025-04-17
CVE-2025-32636 [CRITICAL] CWE-89 CVE-2025-32636: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in matthewrubin Local Magic local-magic allows SQL Injection.This issue affects Local Magic: from n/a through <= 2.9.0.
nvd
CVE-2025-31858P4MEDIUMCVSS 6.5≤ 2.9.02025-04-03
CVE-2025-31858 [MEDIUM] CWE-862 CVE-2025-31858: Missing Authorization vulnerability in matthewrubin Local Magic local-magic allows Exploiting Incorr
Missing Authorization vulnerability in matthewrubin Local Magic local-magic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Local Magic: from n/a through <= 2.9.0.
nvd