{"action":"Upgrade apache-submarine to 0.8.0 or later.","affected":[{"fixed":"0.8.0","introduced":"0.7.0"}],"component":"apache-submarine","cve_ids":["CVE-2023-37924"],"ecosystem":"PyPI","epss":0.07225,"exploited":false,"fixed_versions":["0.8.0"],"ghsa_id":"GHSA-v5gj-fx3g-hcpw","id":"tcs_01M5KGK3AEP8HFA1TYA5BGWB3E","modified_at":"2026-06-10T17:00:33.080935626Z","published_at":"2023-11-22T10:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-244","https://issues.apache.org/jira/browse/SUBMARINE-1361","https://github.com/apache/submarine/pull/1037","https://lists.apache.org/thread/g99h773vd49n1wyghdq1llv2f83w1b3r","https://github.com/advisories/GHSA-v5gj-fx3g-hcpw"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-244","url":"https://osv.dev/vulnerability/PYSEC-2023-244"}],"summary":"Apache Software Foundation Apache Submarine has an SQL injection vulnerability when a user logs in. This issue can result in unauthorized login."}