dbgate-api vulnerabilities (npm)

2 vulnerabilities.

• dbgate-api npm DbGate: Remote Code Execution via functionName injection in loadReader endpoint CVE-2026-48017 Public exploitFix available 8.8 HighJune 5, 2026
• dbgate-api npm DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection CVE-2026-47670 Public exploitFix available 9.4 CriticalJune 5, 2026