Yiuman CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Yiuman CVE published 2026-10-14

CVE-2026-110614

PatchSiren debrief for CVE-2026-110614: Yiuman citrus through 0.15.0 contains an ORDER BY SQL injection vulnerability in the citrus-support generic query framework, allowing users to inject SQL via the sortBy request parameter. This vulnerability enables attackers to extract database contents using boolean- or time-based blind techniques. Defenders responsible for Yiuman citrus deployments should assess e [truncated]