| id: GO-2023-1494 |
| modules: |
| - module: github.com/elgs/gosqljson |
| versions: |
| - fixed: 0.0.0-20220916234230-750f26ee23c7 |
| vulnerable_at: 0.0.0-20140902115517-fa34a82f9316 |
| packages: |
| - package: github.com/elgs/gosqljson |
| symbols: |
| - ExecDb |
| - QueryDbToArray |
| - QueryDbToMap |
| derived_symbols: |
| - QueryDbToArrayJson |
| - QueryDbToMapJson |
| summary: SQL injection in github.com/elgs/gosqljson |
| description: |- |
| There is a potential for SQL injection through manipulation of the sqlStatement |
| argument. |
| cves: |
| - CVE-2014-125064 |
| ghsas: |
| - GHSA-g7mw-9pf9-p2pm |
| references: |
| - fix: https://github.com/elgs/gosqljson/commit/2740b331546cb88eb61771df4c07d389e9f0363a |
