Review
QueueForge
CVE published 2026-10-16
CVE-2026-68549
A path traversal vulnerability in ClickMigrate's `revision` command allows an attacker to create a `.sql` file in an arbitrary location writable by the user executing the command, but only if the attacker can influence the migration name passed to the command. This issue is only exploitable if an attacker can influence the migration name passed to the `revision` command, such as through an insecure automa [truncated]