id: GO-2024-3070
modules:
    - module: github.com/stashapp/stash
      versions:
        - fixed: 0.26.0
      vulnerable_at: 0.25.1
summary: SQL injection in github.com/stashapp/stash
cves:
    - CVE-2024-32231
ghsas:
    - GHSA-75jf-52jg-qqh4
references:
    - advisory: https://github.com/advisories/GHSA-75jf-52jg-qqh4
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-32231
    - fix: https://github.com/stashapp/stash/commit/89553864f5fa92beaa37a12e489064b1358d9880
    - fix: https://github.com/stashapp/stash/pull/4865
source:
    id: GHSA-75jf-52jg-qqh4
    created: 2024-08-16T17:05:15.978263-04:00
review_status: UNREVIEWED