Apache Fineract through 1.15.0 has SQL injection in ORDER BY (CVE-2026-65874)
Caller-supplied orderBy, sortOrder and related parameters are concatenated on Center and datatable read APIs.
Stories per day · 30 days
1 stories, newest first · one card per story