Description
NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query_packets and insert functions.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ait-core | <= 2.5.2 | — | GHSA-gpgj-xrgw-8mx2 |
Critical · 9.8
CVE-2024-35056
EUVD-2024-1629GHSA-gpgj-xrgw-8mx2PYSEC-2026-262
NASA AIT-Core vulnerable to SQL Injection
Published May 21, 2024 · Updated Aug 2, 2024 · Assigned by mitre