| id: GO-2024-2587 |
| modules: |
| - module: github.com/apache/age/drivers/golang |
| vulnerable_at: 0.0.0-20240221054422-3b2b394eb669 |
| packages: |
| - package: github.com/apache/age/drivers/golang/age |
| symbols: |
| - ExecCypher |
| - ExecCypherMap |
| - AgeTx.ExecCypher |
| - AgeTx.ExecCypherMap |
| summary: SQL injection in github.com/apache/age/drivers/golang |
| cves: |
| - CVE-2022-45786 |
| ghsas: |
| - GHSA-6p5q-h963-pwwf |
| references: |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2022-45786 |
| - web: https://lists.apache.org/thread/of8x0gt5d2vfrm5ksxw55bwn2849ck1w |
| notes: |
| - Symbols determined manually from description of vulnerability. |
