What’s Vulnerable › Vulnerabilities

CVE-2025-60514

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-17 · updated 2026-06-17
• Weakness: CWE-89

Description

Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder.helper.ts.

References

• https://github.com/tillywork/tillywork/pull/288/commits/c57171fd17a857d7ec79e9051b23ace98d5c6a17
• https://www.secstrike.ai/cve-2025-60514-tillywork-sql-injection-public-disclosure/

Get alerted when CVE-2025-60514 or the next vulnerability affects your stack