Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-38539.json"