Skip to content
OpenAdvisories

Vendor

seancorfield

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    HoneySQL unchecked entity names can lead to SQL injection results

    HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL `DSL` by calling `keyword` or `symbol` on that input can produce SQL strings that facilitate SQL injection …