CVE-2026-63037: Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint

<p>Posted by Charles Zhang on Aug 20</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache InLong 2.0.0 before 2.4.0<br /> <br /> Description:<br /> <br /> Improper Neutralization of Special Elements used in an SQL Command (&apos;SQL Injection&apos;) vulnerability in Apache InLong. <br /> This appears to allow SQL injection in the ORDER BY clause against the<br /> Manager ba