What is GHSA-3536-74c2-mgrr?

GHSA-3536-74c2-mgrr is a security advisory published by GitHub Security Advisories with unknown severity. Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection")...

Which CVE IDs does GHSA-3536-74c2-mgrr cover?

GHSA-3536-74c2-mgrr covers the following CVE IDs: CVE-2026-64618. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-3536-74c2-mgrrunknown

Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection")...

Vendor

GitHub Security Advisories

Published

October 30, 2026

Last Modified

October 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-64618 →

📋 Description

Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fineract (through version 1.15.0). The vulnerability affects the outStandingAmountPercentageCondition parameter of the /fineract-provider/api/v1/search/advance HTTP API endpoint, allowing SQL injection due to insufficient input neutralization. Users are recommended to upgrade to version 1.16.1, which will fix the issue.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-64618
https://github.com/apache/fineract/pull/6153
https://lists.apache.org/thread/s8orckszcd9x4d1qsloc046ppf5q9oc7
http://www.openwall.com/lists/oss-security/2026/10/30/4
https://github.com/advisories/GHSA-3536-74c2-mgrr