{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"9.7.0-M5"}],"component":"net.risesoft:risenet-y9boot-support-platform-service","cve_ids":["CVE-2026-1050"],"ecosystem":"Maven","epss":0.00396,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vhcx-7rpg-hp39","id":"tcs_01M5N9E47S9DHDP04WA1S60VXK","modified_at":"2026-09-10T03:50:59.306951318Z","published_at":"2026-01-17T18:30:20Z","references":["https://osv.dev/vulnerability/GHSA-vhcx-7rpg-hp39","https://nvd.nist.gov/vuln/detail/CVE-2026-1050","https://github.com/risesoft-y9/Digital-Infrastructure/issues/2","https://github.com/risesoft-y9/Digital-Infrastructure","https://vuldb.com/?ctiid.341603","https://vuldb.com/?id.341603","https://vuldb.com/?submit.731010"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-vhcx-7rpg-hp39","url":"https://osv.dev/vulnerability/GHSA-vhcx-7rpg-hp39"}],"summary":"risesoft-y9 Digital-Infrastructure has a SQL injection vulnerability"}