Query
Relevant PR: github/codeql#5680
CVE ID(s)
WIP
Report
SQLAlchemy is one of the most popular ORM engines for working with SQL databases within the Python ecosystem. This query identifies a variety of cases where SQL injection can occur when the developer accidentally allows SQL injection to be injected into SQL queries.
Result(s)
WIP
Misc
Please split the bounty 50/50 between myself and @jorgectf. After a discussion with @jorgectf I will be taking the full bounty.
Query
Relevant PR: github/codeql#5680
CVE ID(s)
WIP
Report
SQLAlchemy is one of the most popular ORM engines for working with SQL databases within the Python ecosystem. This query identifies a variety of cases where SQL injection can occur when the developer accidentally allows SQL injection to be injected into SQL queries.
Result(s)
WIP
Misc
Please split the bounty 50/50 between myself and @jorgectf.After a discussion with @jorgectf I will be taking the full bounty.