{"action":"Upgrade NHibernate to 5.4.9 (5.4.x) or 5.5.2 (5.5.x) or later.","affected":[{"fixed":"5.4.9","introduced":"0"},{"fixed":"5.5.2","introduced":"5.5.0"}],"component":"NHibernate","cve_ids":["CVE-2024-39677"],"ecosystem":"NuGet","epss":0.00578,"exploited":false,"fixed_versions":["5.4.9","5.5.2"],"ghsa_id":"GHSA-fg4q-ccq8-3r5q","id":"tcs_01M5N8MK0XGB0CGF8ZMRP803NZ","modified_at":"2026-09-10T03:50:16.921728747Z","published_at":"2024-07-08T14:20:33Z","references":["https://osv.dev/vulnerability/GHSA-fg4q-ccq8-3r5q","https://github.com/nhibernate/nhibernate-core/security/advisories/GHSA-fg4q-ccq8-3r5q","https://nvd.nist.gov/vuln/detail/CVE-2024-39677","https://github.com/nhibernate/nhibernate-core/issues/3516","https://github.com/nhibernate/nhibernate-core/pull/3517","https://github.com/nhibernate/nhibernate-core/pull/3547","https://github.com/nhibernate/nhibernate-core/commit/b4a69d1a5ff5744312478d70308329af496e4ba9","https://github.com/nhibernate/nhibernate-core"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-fg4q-ccq8-3r5q","url":"https://osv.dev/vulnerability/GHSA-fg4q-ccq8-3r5q"}],"summary":"NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities"}