Open-source package vulnerability · Go
CVE-2024-32231: SQL injection in github.com/stashapp/stash
criticalCVSS 3.1 9.1GHSA-75jf-52jg-qqh4
Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.
Published Aug 15, 2024 · Updated Sep 6, 2024
Affected packages
github.com/stashapp/stash
- Ecosystem
- Go
- Affected
- < 0.26.0
- Fixed in
- 0.26.0
- Check
go list -m github.com/stashapp/stash
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology