{"action":"Upgrade github.com/layer5io/meshery to 0.7.22 or later.","affected":[{"fixed":"0.7.22","introduced":"0"}],"component":"github.com/layer5io/meshery","cve_ids":["CVE-2024-35182"],"ecosystem":"Go","epss":0.01565,"exploited":false,"fixed_versions":["0.7.22"],"ghsa_id":"GHSA-h7cm-jvpp-69xf","id":"tcs_01M5KFC4CAV2EA5QNS6JTZNDAE","modified_at":"2024-08-06T23:12:05.170280Z","published_at":"2024-08-05T21:29:26Z","references":["https://osv.dev/vulnerability/GHSA-h7cm-jvpp-69xf","https://nvd.nist.gov/vuln/detail/CVE-2024-35182","https://github.com/meshery/meshery/pull/10280","https://github.com/meshery/meshery/commit/b55f6064d0c6a965aee38f30281f99da7dc4420c","https://github.com/layer5io/meshery","https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/handlers/events_streamer.go#L52","https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/models/events_persister.go#L47","https://securitylab.github.com/advisories/GHSL-2024-013_GHSL-2024-014_Meshery"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-h7cm-jvpp-69xf","url":"https://osv.dev/vulnerability/GHSA-h7cm-jvpp-69xf"}],"summary":"Meshery SQL Injection vulnerability"}