1.3.0
CVE-2022-34265: Potential SQL injection via Trunc(kind)
and Extract(lookup_name)
arguments Trunc()
and Extract()
database functions were subject to SQL injection if untrusted data was used as a kind/lookup_name
value.
What's Changed
New Contributors
Full Changelog: 1.2.0...1.3.0