CVE-2026-38626

CVSS 9.8 (critical) · published 2026-09-10

Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php.

Weakness: CWE-89

Source: NVD CVE-2026-38626

References

• https://github.com/GaurishBahurupi/SQLI-in-Garlic-Hub/blob/main/REPORT.md

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.