{"action":"Upgrade propel/propel1 to 1.7.2 or later.","affected":[{"fixed":"1.7.2","introduced":"1"}],"component":"propel/propel1","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.7.2"],"ghsa_id":"GHSA-7g7c-qhf3-x59p","id":"tcs_01M5KEY24ATNAFE2J4KZE1RTXM","modified_at":"2024-12-05T05:39:36.081597Z","published_at":"2024-05-20T17:36:28Z","references":["https://osv.dev/vulnerability/GHSA-7g7c-qhf3-x59p","https://github.com/propelorm/Propel/issues/1052","https://github.com/propelorm/Propel/pull/1054","https://github.com/propelorm/Propel/commit/b72093201f8e225410f62a246653ac039e31c90a","https://github.com/FriendsOfPHP/security-advisories/blob/master/propel/propel1/2018-02-14.yaml","https://github.com/propelorm/Propel"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7g7c-qhf3-x59p","url":"https://osv.dev/vulnerability/GHSA-7g7c-qhf3-x59p"}],"summary":"propel/propel1 SQL injection possible with limit() on MySQL"}