GHSA-q6wc-xx4m-92fj
Medium · 6.5CVSS
6.5
EPSS
—
Published
Mar 7, 2026
CISA due date
—
The record
PowerSync: Some sync filters ignored on 1.20.0 using `config.edition: 3`
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @powersync/service-core | 1.20.0 | 1.20.1 |
| npm | @powersync/service-sync-rules | 0.32.0 | 0.33.0 |
Related vulnerabilities
- CVE-2026-30870 PowerSync Service is the server-side component of the PowerSync sync engine. Same vulnerability
- CVE-2026-85543 Some Wi-Fi series camera products have insufficient permission validation on certain… CWE-285
- CVE-2026-21097 Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1… CWE-285
- CVE-2026-86804 A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. CWE-285
- CVE-2026-86277 A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management &… CWE-285
- CVE-2026-86283 MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp)… CWE-285
- CVE-2026-86212 A vulnerability has been found in Open5GS 2.7.7/2.8.0. CWE-285
- CVE-2026-86183 A vulnerability was identified in diem-project diem up to 5.1.3. CWE-285