{"action":"Upgrade apache-submarine to 0.8.0 or later.","affected":[{"fixed":"0.8.0","introduced":"0.7.0"}],"component":"apache-submarine","cve_ids":["CVE-2023-37924"],"ecosystem":"PyPI","epss":0.07167,"exploited":false,"fixed_versions":["0.8.0"],"ghsa_id":"GHSA-v5gj-fx3g-hcpw","id":"tcs_01M5KFZ921ZZKBT0A0MTM0E0P4","modified_at":"2024-02-16T08:13:20.286418Z","published_at":"2023-11-22T12:30:26Z","references":["https://osv.dev/vulnerability/GHSA-v5gj-fx3g-hcpw","https://nvd.nist.gov/vuln/detail/CVE-2023-37924","https://github.com/apache/submarine/pull/1037","https://github.com/apache/submarine/commit/4cd2af10499ac6dc4f82bda179d9f414a522abef","https://github.com/apache/submarine","https://github.com/pypa/advisory-database/tree/main/vulns/apache-submarine/PYSEC-2023-244.yaml","https://issues.apache.org/jira/browse/SUBMARINE-1361","https://lists.apache.org/thread/g99h773vd49n1wyghdq1llv2f83w1b3r"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-v5gj-fx3g-hcpw","url":"https://osv.dev/vulnerability/GHSA-v5gj-fx3g-hcpw"}],"summary":"SQL injection in Apache Submarine"}