CVE-2022-38542: Archerydms Archery

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface. The project has released an update, please upgrade to v1.9.0 and above.

Affected products

• Archerydms Archery: from 1.4.0, before 1.9.0 (fixed in 1.9.0)

Published 2022-09-13. Last modified 2026-06-17.