{"action":"Upgrade github.com/concourse/concourse to 5.0.1 or later.","affected":[{"fixed":"5.0.1","introduced":"0"}],"component":"github.com/concourse/concourse","cve_ids":["CVE-2019-3792"],"ecosystem":"Go","epss":0.01091,"exploited":false,"fixed_versions":["5.0.1"],"ghsa_id":"GHSA-4fqx-74rv-638w","id":"tcs_01M5KEWGBEBE3EJ0WMPHVH99XX","modified_at":"2023-11-08T04:01:34.220779Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-4fqx-74rv-638w","https://nvd.nist.gov/vuln/detail/CVE-2019-3792","https://github.com/concourse/concourse/commit/dc3d15ab6c3a69890c9985f9c875d4c2949be727","https://github.com/concourse/concourse/blob/master/release-notes/v5.0.1.md#v501-note-1","https://pivotal.io/security/cve-2019-3792"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4fqx-74rv-638w","url":"https://osv.dev/vulnerability/GHSA-4fqx-74rv-638w"}],"summary":"Pivotal Concourse SQL Injection Vulnerability"}