{"action":"Upgrade ironic-inspector to 5.0.2 or later.","affected":[{"fixed":"5.0.2","introduced":"0"},{"fixed":"6.0.3","introduced":"5.1.0"},{"fixed":"7.2.4","introduced":"6.1.0"},{"fixed":"8.0.3","introduced":"8.0.0"},{"fixed":"8.2.1","introduced":"8.1.0"}],"component":"ironic-inspector","cve_ids":["CVE-2019-10141"],"ecosystem":"PyPI","epss":0.02484,"exploited":false,"fixed_versions":["5.0.2","6.0.3","7.2.4","8.0.3","8.2.1"],"ghsa_id":"GHSA-c7fc-cm7p-92r2","id":"tcs_01M5KFCEEPV13N1W7SQGYV50VA","modified_at":"2024-09-27T16:01:01.223023Z","published_at":"2022-05-24T16:51:42Z","references":["https://osv.dev/vulnerability/GHSA-c7fc-cm7p-92r2","https://nvd.nist.gov/vuln/detail/CVE-2019-10141","https://github.com/openstack/ironic-inspector/commit/17c796b49171b6133e988f78c92d7c9b7ed3fcf3","https://github.com/openstack/ironic-inspector/commit/67ff87ebca1016d44bd9d284ec4c16a88a533cfc","https://github.com/openstack/ironic-inspector/commit/97f9d34f8376ac7accd2597b3bdce67a9dac664f","https://github.com/openstack/ironic-inspector/commit/9d107900b2e0b599397b84409580d46e0ed16291","https://access.redhat.com/errata/RHSA-2019:2505","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10141","https://docs.openstack.org/releasenotes/ironic-inspector/ocata.html#relnotes-5-0-2-7-origin-stable-ocata","https://docs.openstack.org/releasenotes/ironic-inspector/pike.html#relnotes-6-0-3-4-stable-pike","https://docs.openstack.org/releasenotes/ironic-inspector/queens.html#relnotes-7-2-4-stable-queens","https://docs.openstack.org/releasenotes/ironic-inspector/rocky.html#relnotes-8-0-3-stable-rocky","https://docs.openstack.org/releasenotes/ironic-inspector/stein.html#relnotes-8-2-1-stable-stein","https://github.com/openstack/ironic-inspector","https://github.com/pypa/advisory-database/tree/main/vulns/ironic-inspector/PYSEC-2019-152.yaml","https://review.opendev.org/c/openstack/ironic-inspector/+/660234","https://storyboard.openstack.org/#!/story/2005678"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-c7fc-cm7p-92r2","url":"https://osv.dev/vulnerability/GHSA-c7fc-cm7p-92r2"}],"summary":"Openstack ironic-inspector has SQL injection vulnerability in node_cache"}