CVE-2022-38488: Logrocket-OAUTH2-Example Project Logrocket-OAUTH2-Example

Critical severity, CVSS 9.8. EPSS: 14.2% chance of exploitation in the next 30 days.

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter.

Affected products

• Logrocket-OAUTH2-Example Project Logrocket-OAUTH2-Example: up to and including 2020-05-27

Published 2022-12-14. Last modified 2026-06-17.