What is GHSA-fgqx-9q7r-qrvh?

GHSA-fgqx-9q7r-qrvh is a security advisory published by GitHub Security Advisories with High severity. SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with...

Which CVE IDs does GHSA-fgqx-9q7r-qrvh cover?

GHSA-fgqx-9q7r-qrvh covers the following CVE IDs: CVE-2026-40546. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-fgqx-9q7r-qrvhHigh

SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with...

Vendor

GitHub Security Advisories

Published

June 1, 2026

Last Modified

June 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-40546 →

📋 Description

SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters. Attacker with low privileges can inject arbitrary SQL commands, potentially gaining full control over the database.

This issue affects SOPlanning version 1.55 and below.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-40546
https://cert.pl/en/posts/2026/06/CVE-2026-40543
https://www.soplanning.org/en
https://github.com/advisories/GHSA-fgqx-9q7r-qrvh