Skip to content

fix: SQL injection via aggregate and distinct field names in PostgreSQL adapter (GHSA-p2w6-rmh7-w8q3)#10272

Merged
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-p2w6-rmh7-w8q3-v9
Mar 21, 2026
Merged

fix: SQL injection via aggregate and distinct field names in PostgreSQL adapter (GHSA-p2w6-rmh7-w8q3)#10272
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-p2w6-rmh7-w8q3-v9

fix: Require $ prefix in aggregate field expressions

9208138
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 warning

The logs for this run have expired and are no longer available.