Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/dbgate-web@5.2.2-alpha.12
purl pkg:npm/dbgate-web@5.2.2-alpha.12
Next non-vulnerable version 7.1.5
Latest non-vulnerable version 7.1.5
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-uhqw-4um6-5uhs
Aliases:
CVE-2026-6216
GHSA-j8j5-7r4h-vj2g
A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/web/src/icons/FontIcon.svelte of the component SVG Icon String Handler. Such manipulation of the argument applicationIcon leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 7.1.5 mitigates this issue. It is advisable to upgrade the affected component.
7.1.5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T22:02:01.007373+00:00 GitLab Importer Affected by VCID-uhqw-4um6-5uhs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/dbgate-web/CVE-2026-6216.yml 38.6.0