Vendor
Shinobi versions prior to commit 5a76c74f contain a hardcoded connection key in the child node service, allowing unauthenticated attackers to execute arbitrary SQL queries.