{"action":"Upgrade github.com/layer5io/meshery to 0.7.22 or later.","affected":[{"fixed":"0.7.22","introduced":"0"}],"component":"github.com/layer5io/meshery","cve_ids":["CVE-2024-35181"],"ecosystem":"Go","epss":0.01596,"exploited":false,"fixed_versions":["0.7.22"],"ghsa_id":"GHSA-9f24-jrv4-f8g5","id":"tcs_01M5KF5E6AKV5G8A0C7QZFSH3Y","modified_at":"2024-08-06T23:11:58.563744Z","published_at":"2024-08-05T21:29:26Z","references":["https://osv.dev/vulnerability/GHSA-9f24-jrv4-f8g5","https://nvd.nist.gov/vuln/detail/CVE-2024-35181","https://github.com/meshery/meshery/pull/10207","https://github.com/meshery/meshery/pull/10280","https://github.com/meshery/meshery/commit/8e995ce21af02d32ef61689c1e1748a745917f13","https://github.com/meshery/meshery/commit/b55f6064d0c6a965aee38f30281f99da7dc4420c","https://github.com/layer5io/meshery","https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/handlers/meshsync_handler.go#L187","https://securitylab.github.com/advisories/GHSL-2024-013_GHSL-2024-014_Meshery"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-9f24-jrv4-f8g5","url":"https://osv.dev/vulnerability/GHSA-9f24-jrv4-f8g5"}],"summary":"Meshery SQL Injection vulnerability"}