CVE-2026-63039: Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService

<p>Posted by Charles Zhang on Aug 20</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache InLong 2.0.0 before 2.4.0<br /> <br /> Description:<br /> <br /> Improper Neutralization of Special Elements used in an SQL Command (&apos;SQL Injection&apos;) vulnerability in Apache InLong. <br /> This allows an attacker to inject the string value into<br /> the SQL statement, enabli