apache-age-dijkstra (>=0.2.1, <=0.2.2) potentially affected by CVE-2022-45786 via apache-age-python (0.0.4)

apache-age-python PYPI version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-age-python and may be impacted: - apache-age-dijkstra =0.2.1, =0.2.2 Source cves: CVE-2022-45786 Source advisory: OSV:PYSEC-2026-769...

PYSEC-2026-769 Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest Golang and Python drivers in addition t...

GO-2024-2587 SQL injection in github.com/apache/age/drivers/golang

SQL injection in github.com/apache/age/drivers/golang...

SQL Injection

Apache Age is vulnerable to SQL Injection attacks. A specifically crafted attack statement through the cypher function allows a malicious user to inject and execute arbitrary SQL queries on the target system due to the failure to fully utilize parameterization. This only impacts PostgreSQL 11 and...

apache-age-dijkstra (>=0.2.1, <=0.2.2) potentially affected by CVE-2022-45786 via apache-age-python (0.0.4)

apache-age-python PYPI version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-age-python and may be impacted: - apache-age-dijkstra =0.2.1, =0.2.2 Source cves: CVE-2022-45786 Source advisory: GHSA-6P5Q-H963-PWWF...

apache-age-dijkstra (>=0.2.1, <=0.2.2) potentially affected by CVE-2022-45786 via apache-age-python (0.0.4)

apache-age-python PYPI version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-age-python and may be impacted: - apache-age-dijkstra =0.2.1, =0.2.2 Source cves: CVE-2022-45786 Source advisory: OSV:GHSA-6P5Q-H963-PWWF...

GHSA-6P5Q-H963-PWWF Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest Golang and Python drivers in addition t...

Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest Golang and Python drivers in addition t...

CVE-2022-45786 Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest Golang and Python drivers in addition t...

CVE-2022-45786 Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest Golang and Python drivers in addition t...

Apache AGE SQL injection vulnerability

Apache AGE is a PostgreSQL extension from the Apache Foundation that provides graphical database functionality. An SQL injection vulnerability exists in the Apache AGE driver, which stems from an inability to parameterize passed values, leading to SQL injection...