GO-2023-1494

Source
https://pkg.go.dev/vuln/GO-2023-1494
Import Source
https://vuln.go.dev/ID/GO-2023-1494.json
Aliases
Published
2023-02-01T23:23:34Z
Modified
2023-11-08T03:57:34.390027Z
Details

There is a potential for SQL injection through manipulation of the sqlStatement argument.

References

Affected packages

Go / github.com/elgs/gosqljson

Package

Name
github.com/elgs/gosqljson

Affected ranges

Type
SEMVER
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.0.0-20220916234230-750f26ee23c7

Ecosystem specific 

{
    "imports": [
        {
            "path": "github.com/elgs/gosqljson",
            "symbols": [
                "ExecDb",
                "QueryDbToArray",
                "QueryDbToArrayJson",
                "QueryDbToMap",
                "QueryDbToMapJson"
            ]
        }
    ]
}