When parameterization fails: SQL injection in Nim's db_postgres module using parameterized queries

I discovered a potential SQL injection vulnerability in Nim's standard library module db_postgres. This affects applications using this module with older PostgreSQL databases or configurations where standard_conforming_strings is disabled.
评论
?
参与讨论