Threats affecting pkg:github/tencent/apijson

CVE-2026-72565 is a critical SQL injection vulnerability in Tencent APIJSON up to version 7.1.0. It allows unauthenticated remote attackers to bypass per-table access controls and read arbitrary database tables using the Map-form @having operator. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.