https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 18:39:24 +0000 https://db.gcve.eu/vuln/cve-2026-121009 <p><strong>Affected:</strong> SQL-Abstract</p> <p>SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -func.</p> <p>injection_guard is documented to apply to every function name, but only the { -name =&gt; ... } shorthand goes through it. The explicit { -func =&gt; [ $name, ... ] } form puts $name into the SQL unchecked.</p> <p>An application that relies on injection_guard to reject an untrusted function name passed with -func allows SQL injection.</p> <p><strong>Affected:</strong> SQL-Abstract</p> <p>SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip the injection_guard check for function names given with -func.</p> <p>injection_guard is documented to apply to every function name, but only the { -name =&gt; ... } shorthand goes through it. The explicit { -func =&gt; [ $name, ... ] } form puts $name into the SQL unchecked.</p> <p>An application that relies on injection_guard to reject an untrusted function name passed with -func allows SQL injection.</p> https://db.gcve.eu/vuln/cve-2026-121009