From 663d0b81a7e7b4352f1b9cd1ba570a7993125959 Mon Sep 17 00:00:00 2001
From: "stonezdj(Daojun Zhang)" <stonezdj@gmail.com>
Date: Wed, 11 Oct 2023 15:57:19 +0800
Subject: [PATCH] Change fixed_version to package_version in query dangerous
 CVE sql (#19397)

Change fixed_version to package_version
  fixes #19391

Signed-off-by: stonezdj <daojunz@vmware.com>
---
 src/pkg/securityhub/dao/security.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/pkg/securityhub/dao/security.go b/src/pkg/securityhub/dao/security.go
index f65720b694e..f3dded04e7c 100644
--- a/src/pkg/securityhub/dao/security.go
+++ b/src/pkg/securityhub/dao/security.go
@@ -66,7 +66,7 @@ WHERE EXISTS (SELECT 1
        vr.package,
        vr.cvss_score_v3,
        vr.description,
-       vr.fixed_version,
+       vr.package_version,
        vr.severity,
        CASE vr.severity
            WHEN 'Critical' THEN 5