{"id":"CGA-3f5c-2862-p2pc","modified":"2026-09-07T01:21:40.133265556Z","published":"2025-10-30T22:00:17Z","upstream":["CVE-2024-32888","GHSA-x3wm-hffr-chwm"],"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32888.json"},{"type":"ADVISORY","url":"https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-x3wm-hffr-chwm"},{"type":"ADVISORY","url":"https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32888"},{"type":"FIX","url":"https://github.com/aws/amazon-redshift-jdbc-driver/commit/0d354a5f26ca23f7cac4e800e3b8734220230319"},{"type":"FIX","url":"https://github.com/aws/amazon-redshift-jdbc-driver/commit/12a5e8ecfbb44c8154fc66041cca2e20ecd7b339"},{"type":"FIX","url":"https://github.com/aws/amazon-redshift-jdbc-driver/commit/bc93694201a291493778ce5369a72befeca5ba7d"},{"type":"ARTICLE","url":"https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/"}],"affected":[{"package":{"name":"trino","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/trino?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"472-r0"}]}],"ecosystem_specific":{"components":[{"component_version":"2.1.0.26","component_type":"java-archive","component_location":"/usr/lib/trino/lib/redshift-jdbc42-2.1.0.26.jar","component_purl":"pkg:maven/redshift-jdbc42@2.1.0.26","latest_event_status":"fixed","latest_event_timestamp":"2025-03-22T10:11:10Z","component_name":"redshift-jdbc42"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3f5c-2862-p2pc.json"}},{"package":{"name":"trino","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/trino?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"472-r0"}]}],"ecosystem_specific":{"components":[{"latest_event_status":"fixed","latest_event_timestamp":"2025-03-22T10:11:10Z","component_name":"redshift-jdbc42","component_version":"2.1.0.26","component_type":"java-archive","component_location":"/usr/lib/trino/lib/redshift-jdbc42-2.1.0.26.jar","component_purl":"pkg:maven/redshift-jdbc42@2.1.0.26"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3f5c-2862-p2pc.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}]}