What is GHSA-pg4r-4hvf-4rqh?

GHSA-pg4r-4hvf-4rqh is a security advisory published by GitHub Security Advisories with unknown severity. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

Which CVE IDs does GHSA-pg4r-4hvf-4rqh cover?

GHSA-pg4r-4hvf-4rqh covers the following CVE IDs: CVE-2026-63039. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-pg4r-4hvf-4rqhunknown

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

Vendor

GitHub Security Advisories

Published

August 20, 2026

Last Modified

August 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-63039 →

📋 Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject the string value into the SQL statement, enabling SQL injection.

This issue affects Apache InLong: from 2.0.0 before 2.4.0.

Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it.

[1] https://github.com/apache/inlong/pull/12080 .

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-63039
https://lists.apache.org/thread/wzpsgwcx2hxj025pcml0loxr16kl93qt
http://www.openwall.com/lists/oss-security/2026/08/20/13
https://github.com/advisories/GHSA-pg4r-4hvf-4rqh