p PatchFirst

CVE-2026-6216

CVE-2026-6216 · DbGate SVG Icon String FontIcon.svelte cross site scripting

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/web/src/icons/FontIcon.svelte of the component SVG Icon String Handler. Such manipulation of the argument applicationIcon leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 7.1.5 mitigates this issue. It is advisable to upgrade the affected component.

CVSS 5.1 · Medium · EPSS 0.2% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • dbgate

    Versions
    • 7.1.0: Affected
    • 7.1.1: Affected
    • 7.1.2: Affected
    • 7.1.3: Affected
    • 7.1.4: Affected
    • 7.1.5: Not affected

    Update to 7.1.5

  • dbgate-web npm

    Affected ranges
    • SEMVER: < 7.1.5

    Update to 7.1.5

Original sources

Check your server →