{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/layer5io/meshery","cve_ids":["CVE-2024-35182"],"ecosystem":"Go","epss":0.01565,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h7cm-jvpp-69xf","id":"tcs_01M5KG4T0RPE9VYY59TGK6RY3Z","modified_at":"2024-08-06T23:12:05.170280Z","published_at":"2024-08-06T22:40:50Z","references":["https://osv.dev/vulnerability/GO-2024-3051","https://github.com/advisories/GHSA-h7cm-jvpp-69xf","https://nvd.nist.gov/vuln/detail/CVE-2024-35182","https://securitylab.github.com/advisories/GHSL-2024-013_GHSL-2024-014_Meshery","https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/handlers/events_streamer.go#L52","https://github.com/meshery/meshery/blob/b331f45c9083d7abf6b90105072b04cd22473de7/server/models/events_persister.go#L47","https://github.com/meshery/meshery/commit/b55f6064d0c6a965aee38f30281f99da7dc4420c","https://github.com/meshery/meshery/pull/10280"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3051","url":"https://osv.dev/vulnerability/GO-2024-3051"}],"summary":"Meshery SQL Injection vulnerability in github.com/layer5io/meshery"}