What is GHSA-5w9h-62pq-pj3g?

GHSA-5w9h-62pq-pj3g is a security advisory published by GitHub Security Advisories with Critical severity. The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito...

Which CVE IDs does GHSA-5w9h-62pq-pj3g cover?

GHSA-5w9h-62pq-pj3g covers the following CVE IDs: CVE-2026-81674. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-5w9h-62pq-pj3gCritical

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-81674 →

📋 Description

The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database error messages and exposes the internal structure of the queries, which could facilitate further exploitation.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-81674
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-toools-isquad
https://github.com/advisories/GHSA-5w9h-62pq-pj3g