CVE-2026-115997Published
pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-115997 · Microsoft / collected KEV context
cve-program · CVE-2026-115997
- https://vuldb.com/vuln/426095
- https://vuldb.com/vuln/426095/cti
- https://vuldb.com/cve/CVE-2026-115997
- https://vuldb.com/submit/991961
- https://github.com/vinch3s/pig4cloud-cve/blob/main/Pig4Cloud-SQL-Injection.md
- https://github.com/pig-mesh/pig/pull/1289
- https://github.com/pig-mesh/pig/commit/9b6311161e346d7626c81d993044072fed2dca07
- https://github.com/pig-mesh/pig/releases/tag/v4.1.1
- https://github.com/pig-mesh/pig/
Related operational evidence
Explicit CVE identifiers- pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection · Newly collected advisory · 25 Oct 2026