Skip to content
OpenAdvisories

Product · EXODIST

DBIx::QuickORM

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-13766

    DBIx::QuickORM versions before 0.000026 for Perl allow SQL injection via unquoted SQL identifiers

    DBIx::QuickORM versions before 0.000026 for Perl allow SQL injection via unquoted SQL identifiers. The default SQL builder, a SQL::Abstract subclass, sets bindtype in its constructor but never quote_char, so SQL::Abstract emits identifiers verbatim. Caller-su…

    EXODIST DBIx::QuickORM