NuGet/NHibernate CVE-2024-39677: medium 5.9, EPSS 0.58%
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
Action: Upgrade NHibernate to 5.4.9 (5.4.x) or 5.5.2 (5.5.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.4.9 | - |
| 5.5.0 | 5.5.2 | - |
Fixed versions
| 5.4.9 | 5.5.2 |
Sources
- osv: GHSA-fg4q-ccq8-3r5q
- https://github.com/nhibernate/nhibernate-core/security/advisories/GHSA-fg4q-ccq8-3r5q
- https://nvd.nist.gov/vuln/detail/CVE-2024-39677
- https://github.com/nhibernate/nhibernate-core/issues/3516
- https://github.com/nhibernate/nhibernate-core/pull/3517
- https://github.com/nhibernate/nhibernate-core/pull/3547
- https://github.com/nhibernate/nhibernate-core/commit/b4a69d1a5ff5744312478d70308329af496e4ba9
- https://github.com/nhibernate/nhibernate-core
CVE-2024-39677 · published · modified · JSON