What is GHSA-3wj9-3gpr-q6vj?

GHSA-3wj9-3gpr-q6vj is a security advisory published by GitHub Security Advisories with unknown severity. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

Which CVE IDs does GHSA-3wj9-3gpr-q6vj cover?

GHSA-3wj9-3gpr-q6vj covers the following CVE IDs: CVE-2026-63037. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-3wj9-3gpr-q6vjunknown

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

Vendor

GitHub Security Advisories

Published

August 20, 2026

Last Modified

August 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-63037 →

📋 Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause against the Manager backend database.

This issue affects Apache InLong: from 2.0.0 before 2.4.0.

Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/issues/12079 .

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-63037
https://lists.apache.org/thread/po2gvsl30mfjk9cy415hsbzrmqkqpd5r
http://www.openwall.com/lists/oss-security/2026/08/20/11
https://github.com/advisories/GHSA-3wj9-3gpr-q6vj