{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/layer5io/meshery","cve_ids":["CVE-2024-35181"],"ecosystem":"Go","epss":0.01596,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9f24-jrv4-f8g5","id":"tcs_01M5KG4SVXYVJNVA5MH6Q679FY","modified_at":"2024-08-06T23:11:58.563744Z","published_at":"2024-08-06T22:40:50Z","references":["https://osv.dev/vulnerability/GO-2024-3050","https://github.com/advisories/GHSA-9f24-jrv4-f8g5","https://nvd.nist.gov/vuln/detail/CVE-2024-35181","https://securitylab.github.com/advisories/GHSL-2024-013_GHSL-2024-014_Meshery","https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/handlers/meshsync_handler.go#L187","https://github.com/meshery/meshery/commit/8e995ce21af02d32ef61689c1e1748a745917f13","https://github.com/meshery/meshery/commit/b55f6064d0c6a965aee38f30281f99da7dc4420c","https://github.com/meshery/meshery/pull/10207","https://github.com/meshery/meshery/pull/10280"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3050","url":"https://osv.dev/vulnerability/GO-2024-3050"}],"summary":"Meshery SQL Injection vulnerability in github.com/layer5io/meshery"}