VDB
GHSA-f2m2-4q6r-cwc4
GHSA-f2m2-4q6r-cwc4
PUBLISHED
CVSS 7 HIGH
simple-admin-core SQL Injection vulnerability
Record from GitHub Advisory Database · Published August 27, 2025
github.com/suyuan32/simple-admin-core is fixed in 1.6.8 (Go Modules)
simple-admin-core SQL Injection vulnerability
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| github.com/suyuan32/simple-admin-core | Go Modules | 1.6.8 |
Risk scores
CVSS 3.1
7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected products
| Vendor | Product | Versions |
|---|---|---|
| github.com | suyuan32/simple-admin-core | 1.2.0 |
Timeline
- Aug 27, 2025 CVE Published
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-f2m2-4q6r-cwc4
vulnetix vdb fixes GHSA-f2m2-4q6r-cwc4Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-f2m2-4q6r-cwc4/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-51667 advisory
- https://github.com/suyuan32/simple-admin-core/issues/333 url
- https://github.com/suyuan32/simple-admin-core/commit/f1e2c4f3c55cd5953ad7f7b0706df48adaaeb18a url
- https://gist.github.com/66Giraffe66/fc258f7fcc65a6a1a1a01e217977b92d url
- https://github.com/suyuan32/simple-admin-core package