—
GO-2024-3045
Meshery SQL Injection vulnerability in github.com/layer5io/meshery
Quick fix
GO-2024-3045 — github.com/layer5io/meshery: upgrade to the fixed version with the command below.
go get github.com/layer5io/meshery@v0.7.17Details
Meshery SQL Injection vulnerability in github.com/layer5io/meshery
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/layer5io/meshery
Introduced in:
0Fixed in: 0.7.17Fix
go get github.com/layer5io/meshery@v0.7.17References
- https://github.com/advisories/GHSA-652r-q29p-m25h[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2024-29031[ADVISORY]
- https://securitylab.github.com/advisories/GHSL-2023-249_Meshery[ADVISORY]
- https://github.com/meshery/meshery/commit/8e995ce21af02d32ef61689c1e1748a745917f13[WEB]
- https://github.com/meshery/meshery/pull/10207[WEB]