{"action":"Upgrade webpa/webpa to 3.1.2 or later.","affected":[{"fixed":"3.1.2","introduced":"0"}],"component":"webpa/webpa","cve_ids":["CVE-2021-4308"],"ecosystem":"Packagist","epss":0.00713,"exploited":false,"fixed_versions":["3.1.2"],"ghsa_id":"GHSA-mjgw-f2c4-f8qj","id":"tcs_01M5KF5MHW4RSPH88RVW6HDK90","modified_at":"2023-11-08T04:07:08.607808Z","published_at":"2023-01-08T12:30:24Z","references":["https://osv.dev/vulnerability/GHSA-mjgw-f2c4-f8qj","https://nvd.nist.gov/vuln/detail/CVE-2021-4308","https://github.com/WebPA/WebPA/pull/87","https://github.com/WebPA/WebPA/commit/8836c4f549181e885a68e0e7ca561fdbcbd04bf0","https://github.com/WebPA/WebPA","https://github.com/WebPA/WebPA/releases/tag/v3.1.2","https://vuldb.com/?ctiid.217637","https://vuldb.com/?id.217637"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mjgw-f2c4-f8qj","url":"https://osv.dev/vulnerability/GHSA-mjgw-f2c4-f8qj"}],"summary":"WebPA SQL Injection vulnerability"}