What is GHSA-5fmx-jr9j-qpgh?

GHSA-5fmx-jr9j-qpgh is a security advisory published by GitHub Security Advisories with High severity. ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL...

Which CVE IDs does GHSA-5fmx-jr9j-qpgh cover?

GHSA-5fmx-jr9j-qpgh covers the following CVE IDs: CVE-2026-52691. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5fmx-jr9j-qpgh?

GHSA-5fmx-jr9j-qpgh has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-5fmx-jr9j-qpghHighCVSS 8.8

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in an SQL...

Vendor

GitHub Security Advisories

Published

September 4, 2026

Last Modified

September 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-52691 →

📋 Description

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Griffin Hive Metastore Module.

This issue affects Apache Griffin Hive Metastore Module: all versions.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-52691
https://lists.apache.org/thread/ocjolvzl804qlkto2vx685f8o23vxxlo
http://www.openwall.com/lists/oss-security/2026/09/04/4
https://github.com/advisories/GHSA-5fmx-jr9j-qpgh