Skip to content

0.45.2

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Mar 17:06
· 1 commit to main since this release
0.45.2
273c780
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped
    causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @EthanKim88, @0x90sh and @wgoodall01 for reaching out to us with a reproduction and suggested fix

Contributors

wgoodall01, 0x90sh, and EthanKim88
Assets 3
Loading