CVE-2019-15562: Gorm

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects trusted SQL fragments is a vulnerability in the application, not in Gorm

Affected products

• Gorm Gorm: before 1.9.10 (fixed in 1.9.10)

Published 2019-08-26. Last modified 2026-06-17.