Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/%40adonisjs/lucid@21.8.2
Typenpm
Namespace@adonisjs
Namelucid
Version21.8.2
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version22.0.0-next.6
Latest_non_vulnerable_version22.0.0-next.6
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-jv3q-b2j8-6fbe
vulnerability_id VCID-jv3q-b2j8-6fbe
summary 
Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State
**Description**
A Mass Assignment (CWE-915) vulnerability in AdonisJS Lucid may allow a remote attacker who can influence data that is passed into Lucid model assignments to overwrite the internal ORM state. This may lead to logic bypasses and unauthorized record modification within a table or model. This affects @adonisjs/lucid through version 21.8.1 and 22.x pre-release versions prior to 22.0.0-next.6. This has been patched in @adonisjs/lucid versions 21.8.2 and 22.0.0-next.6.
references
0
reference_url https://github.com/adonisjs/lucid
reference_id
reference_type
scores
url https://github.com/adonisjs/lucid
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-22814
reference_id CVE-2026-22814
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-22814
2
reference_url https://github.com/adonisjs/lucid/security/advisories/GHSA-g5gc-h5hp-555f
reference_id GHSA-g5gc-h5hp-555f
reference_type
scores
url https://github.com/adonisjs/lucid/security/advisories/GHSA-g5gc-h5hp-555f
3
reference_url https://github.com/advisories/GHSA-g5gc-h5hp-555f
reference_id GHSA-g5gc-h5hp-555f
reference_type
scores
url https://github.com/advisories/GHSA-g5gc-h5hp-555f
fixed_packages
0
url pkg:npm/%40adonisjs/lucid@21.8.2
purl pkg:npm/%40adonisjs/lucid@21.8.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540adonisjs/lucid@21.8.2
1
url pkg:npm/%40adonisjs/lucid@22.0.0-next.6
purl pkg:npm/%40adonisjs/lucid@22.0.0-next.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540adonisjs/lucid@22.0.0-next.6
aliases CVE-2026-22814, GHSA-g5gc-h5hp-555f
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jv3q-b2j8-6fbe
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/%2540adonisjs/lucid@21.8.2