PyPI/apache-submarine CVE-2023-37924: critical 9.8, EPSS 7.17%

SQL injection in Apache Submarine

Action: Upgrade apache-submarine to 0.8.0 or later.

pip install apache-submarine==0.8.0

Affected

Fixed versions

Sources

• osv: GHSA-v5gj-fx3g-hcpw
• https://nvd.nist.gov/vuln/detail/CVE-2023-37924
• https://github.com/apache/submarine/pull/1037
• https://github.com/apache/submarine/commit/4cd2af10499ac6dc4f82bda179d9f414a522abef
• https://github.com/apache/submarine
• https://github.com/pypa/advisory-database/tree/main/vulns/apache-submarine/PYSEC-2023-244.yaml
• https://issues.apache.org/jira/browse/SUBMARINE-1361
• https://lists.apache.org/thread/g99h773vd49n1wyghdq1llv2f83w1b3r

CVE-2023-37924 · published 2023-11-22T12:30:26Z · modified 2024-02-16T08:13:20.286418Z · JSON