What is GHSA-46x4-v393-xfpx?

GHSA-46x4-v393-xfpx is a security advisory published by GitHub Security Advisories with Critical severity. A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote...

Which CVE IDs does GHSA-46x4-v393-xfpx cover?

GHSA-46x4-v393-xfpx covers the following CVE IDs: CVE-2026-72565. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-46x4-v393-xfpx?

GHSA-46x4-v393-xfpx has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-46x4-v393-xfpxCriticalCVSS 9.8

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote...

Vendor

GitHub Security Advisories

Published

August 10, 2026

Last Modified

August 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-72565 →

📋 Description

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-72565
https://github.com/Tencent/APIJSON
https://github.com/Tencent/APIJSON/blob/master/APIJSONORM/src/main/java/apijson/orm/AbstractSQLConfig.java
https://github.com/advisories/GHSA-46x4-v393-xfpx