{"action":"Upgrade propel/propel to 2.0.0-alpha8 or later.","affected":[{"fixed":"2.0.0-alpha8","introduced":"2.0.0-alpha1"}],"component":"propel/propel","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.0-alpha8"],"ghsa_id":"GHSA-7vw7-qx38-37vr","id":"tcs_01M5KEYEHWFK4T8AFZJYE2GGGJ","modified_at":"2024-12-05T05:32:18.600809Z","published_at":"2024-05-20T17:34:33Z","references":["https://osv.dev/vulnerability/GHSA-7vw7-qx38-37vr","https://github.com/propelorm/Propel2/issues/1463","https://github.com/propelorm/Propel2/pull/1464","https://github.com/propelorm/Propel2/commit/cd23d7384a15cfe203e23b3a835c8ab1d81d9246","https://github.com/FriendsOfPHP/security-advisories/blob/master/propel/propel/2018-02-14.yaml","https://github.com/propelorm/Propel2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7vw7-qx38-37vr","url":"https://osv.dev/vulnerability/GHSA-7vw7-qx38-37vr"}],"summary":"Propel2 SQL injection possible with limit() on MySQL"}