Skip to content
OpenAdvisories

Package · Packagist

doctrine/dbal

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    GHSA-76w8-mqx4-wjrf

    Doctrine DBAL SQL injection possibility

    The identifier quoting in Doctrine DBAL has a potential security problem when user-input is passed into this function, making the security aspect of this functionality obsolete. If you make use of AbstractPlatform::quoteIdentifier() or Doctrine::quoteIdentifi…

    doctrine/dbal Packagist
  • Critical 9.8
    CVE-2021-43608

    DBAL 3 SQL Injection Security Vulnerability

    Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an integer, allowing SQL injection to take place if application developers passed unescaped user input t…

    doctrine/dbal php-doctrine-dbal Ubuntu Packagist