{"action":"Upgrade com.yahoo.elide:elide-datastore-aggregation to 6.1.4 or later.","affected":[{"fixed":"6.1.4","introduced":"6.1.3"}],"component":"com.yahoo.elide:elide-datastore-aggregation","cve_ids":["CVE-2022-24827"],"ecosystem":"Maven","epss":0.01389,"exploited":false,"fixed_versions":["6.1.4"],"ghsa_id":"GHSA-8xpj-9j9g-fc9r","id":"tcs_01M5N8NQAC4ZSVCVXQS5K3JV6H","modified_at":"2023-11-08T04:08:37.999017Z","published_at":"2022-04-08T22:43:17Z","references":["https://osv.dev/vulnerability/GHSA-8xpj-9j9g-fc9r","https://github.com/yahoo/elide/security/advisories/GHSA-8xpj-9j9g-fc9r","https://nvd.nist.gov/vuln/detail/CVE-2022-24827","https://github.com/yahoo/elide/pull/2581","https://github.com/yahoo/elide","https://github.com/yahoo/elide/releases/tag/6.1.4"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-8xpj-9j9g-fc9r","url":"https://osv.dev/vulnerability/GHSA-8xpj-9j9g-fc9r"}],"summary":"SQL Injection in elide-datastore-aggregation"}