Skip to content
OpenAdvisories
High · 8.8 CVE-2026-52691 EUVD-2026-71100GHSA-5fmx-jr9j-qpgh

Apache Griffin Hive Metastore Module: SQL Injection Vulnerability in Hive Metastore Module

Published Sep 4, 2026 · Updated Sep 8, 2026 · Assigned by apache

Description

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Griffin Hive Metastore Module. 

This issue affects Apache Griffin Hive Metastore Module: all versions.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Griffin Hive Metastore Module — —

References