{"action":"Upgrade @curveball/a12n-server to 0.23.0 or later.","affected":[{"fixed":"0.23.0","introduced":"0.20.0"}],"component":"@curveball/a12n-server","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.23.0"],"ghsa_id":"GHSA-crhg-xgrg-vvcc","id":"tcs_01M5KFKK161SFTA6X0VDFXV8XG","modified_at":"2023-01-13T21:34:29Z","published_at":"2023-01-13T21:34:29Z","references":["https://osv.dev/vulnerability/GHSA-crhg-xgrg-vvcc","https://github.com/curveball/a12n-server/security/advisories/GHSA-crhg-xgrg-vvcc","https://nvd.nist.gov/vuln/detail/CVE-2016-20018","https://github.com/knex/knex/issues/1227","https://github.com/curveball/a12n-server/commit/f4acd7549043e6e2b8917b77a50dce0756a922cc","https://github.com/curveball/a12n-server","https://github.com/curveball/a12n-server/releases/tag/v0.23.0","https://www.ghostccamm.com/blog/knex_sqli"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-crhg-xgrg-vvcc","url":"https://osv.dev/vulnerability/GHSA-crhg-xgrg-vvcc"}],"summary":"a12nserver vulnerable to potential SQL Injections via Knex dependency"}