{
  "GSD": {
    "references": [
      "https://www.suse.com/security/cve/CVE-2018-1002161.html",
      "https://advisories.mageia.org/CVE-2018-1002161.html"
    ]
  },
  "namespaces": {
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "\u003c1.11.1 || \u003e=1.12.0,\u003c1.12.2 || \u003e=1.13.0,\u003c1.13.2 || \u003e=1.14.0,\u003c1.14.2 || \u003e=1.15.0,\u003c1.15.2 ||\u00a0\u003e=1.16.0,\u003c1.16.2",
          "affected_versions": "All versions before 1.11.1, all versions starting from 1.12.0 before 1.12.2, all versions starting from 1.13.0 before 1.13.2, all versions starting from 1.14.0 before 1.14.2, all versions starting from 1.15.0 before 1.15.2, all versions starting from 1.16.0 before 1.16.2",
          "credit": "Mike McLean and Patrick Uiterwijk of Red Hat",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2019-02-21",
          "description": "SQL injection vulnerabilities have been found in multiple call handlers in Koji\u2019s hub code. An anonymous attacker can use these vulnerabilities to issue arbitrary database commands.",
          "fixed_versions": [
            "1.17.0"
          ],
          "identifier": "CVE-2018-1002161",
          "identifiers": [
            "CVE-2018-1002161"
          ],
          "package_slug": "pypi/koji",
          "pubdate": "2019-02-21",
          "solution": "Upgrade to fixed version",
          "title": "SQL injection in multiple remote calls",
          "urls": [
            "https://docs.pagure.org/koji/CVE-2018-1002161/",
            "https://pagure.io/koji/issue/1183"
          ],
          "uuid": "f55f8569-aeca-4aa3-9d7b-56849c5db65a"
        }
      ]
    }
  }
}