{
  "cve": "CVE-2026-46364",
  "ghsa": "GHSA-289f-fq7w-6q2w",
  "target_url": "http://localhost:8766/",
  "payload": "test' OR '1'='1",
  "http_status": 200,
  "vulnerable_version": "4.1.1",
  "fixed_version": "4.1.2",
  "vulnerable": true,
  "fix_verified": true,
  "observed_db_state": {
    "vulnerable_useragent_value": "1",
    "fixed_useragent_value": "test' OR '1'='1"
  },
  "impact": "SQL injection via User-Agent header causes payload to be evaluated as SQL. In vulnerable version, boolean expression '1'='1' evaluates to 1 and is stored in the database. In fixed version, the literal string is stored.",
  "reproduced_at": "2026-05-22T10:24:24Z"
}