{"action":"Upgrade org.hibernate:hibernate-core to 5.3.18 (5.3.x), 5.4.18 (5.4.x) or 5.5.0.Beta1 (5.5.x) or later.","affected":[{"fixed":"5.3.18","introduced":"0"},{"fixed":"5.4.18","introduced":"5.4.0"},{"fixed":"5.5.0.Beta1","introduced":"5.5.0.Alpha1"}],"component":"org.hibernate:hibernate-core","cve_ids":["CVE-2019-14900"],"ecosystem":"Maven","epss":0.02126,"exploited":false,"fixed_versions":["5.3.18","5.4.18","5.5.0.Beta1"],"ghsa_id":"GHSA-8grg-q944-cch5","id":"tcs_01M5N8MPV1SMVP8Y6GDQGER4B3","modified_at":"2024-06-27T18:20:05.068274Z","published_at":"2022-02-10T23:05:04Z","references":["https://osv.dev/vulnerability/GHSA-8grg-q944-cch5","https://nvd.nist.gov/vuln/detail/CVE-2019-14900","https://github.com/hibernate/hibernate-orm/commit/3f3c1ab50604ab9ba99e25d2016fb85f3ba9dcd4","https://github.com/hibernate/hibernate-orm/commit/646b383f959eff18d58081b1a574f0d777d353da","https://github.com/hibernate/hibernate-orm/commit/e0e22ea256c1906235d6a8e90b79c4ce33d0861f","https://github.com/hibernate/hibernate-orm/commit/eebf01fbf3c2550ee70cdc9c1b02b52e330c8c36","https://bugzilla.redhat.com/show_bug.cgi?id=1666499","https://github.com/hibernate/hibernate-orm","https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E","https://security.netapp.com/advisory/ntap-20220210-0020"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8grg-q944-cch5","url":"https://osv.dev/vulnerability/GHSA-8grg-q944-cch5"}],"summary":"SQL Injection in Hibernate ORM"}