CVE-2024-38866

Impact

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/NagVis/nagvis/pull/398/commits/8d5d07e22dfca78df7420ac81cffff6f45ca9694
• https://www.nagvis.org/downloads/changelog/1.9.47
• https://lists.debian.org/debian-lts-announce/2025/06/msg00031.html