{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.46"}],"component":"librenms/librenms","cve_ids":["CVE-2020-36947"],"ecosystem":"Packagist","epss":0.00474,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qp2j-v5jg-hg68","id":"tcs_01M5KF7EY81QCGQA2PTHV3Q5AG","modified_at":"2026-02-03T17:51:55.126654Z","published_at":"2026-01-27T18:32:14Z","references":["https://osv.dev/vulnerability/GHSA-qp2j-v5jg-hg68","https://nvd.nist.gov/vuln/detail/CVE-2020-36947","https://community.librenms.org","https://github.com/librenms/librenms","https://www.exploit-db.com/exploits/49246","https://www.vulncheck.com/advisories/librenms-mac-accounting-graph-authenticated-sql-injection"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-qp2j-v5jg-hg68","url":"https://osv.dev/vulnerability/GHSA-qp2j-v5jg-hg68"}],"summary":"LibreNMS contains an authenticated SQL Injection vulnerability"}