Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Resolved Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
Advisories for Maven/Org.apache.skywalking/Oap-Server package
2021