SQL::Abstract

Mentions · 7d1
Mentions · 30d2
All mentions2
First seenNov 4, 2026
Last mentioned4d ago

Timeline

2 articles · newest first

SQL::Abstract before 2.000003 allows SQL injection via arrayref (CVE-2026-121265)

Passing an arrayref column value in insert and update statements enables SQL injection in SQL::Abstract before 2.000003.

oss-securityNov 7, 18:53 UTC · 4d agoVulnerabilityCVE-2026-121265

SQL::Abstract and SQL::Abstract::Tree before 2.000001_04 for Perl allow SQL injection and XSS (CVE-2026-121007,…

Versions before 2.000001_04 allow SQL injection via where values in identifier position and XSS via unescaped SQL text and bind values.

oss-securityNov 4, 16:02 UTC · 7d agoVulnerability 3 sourcesCVE-2026-121007 CVE-2026-121008 CVE-2026-1210091

Related CVEs

by mentions

CVE-2026-121265<1%9.8
SQL Injection in SQL::Abstract before 2.000003
published 4d agoCPAN SQL::AbstractPoC
CVE-2026-1210097.3
SQL Injection in SQL::Abstract before 2.000001_04
published 7d agoPerl SQL::Abstract
CVE-2026-1210077.3
SQL injection in SQL::Abstract before 2.000001_04
published 7d agoCPAN SQL-Abstract
CVE-2026-1210085.4
XSS in SQL::Abstract::Tree before 2.000001_04
published 7d agoPerl SQL::Abstract::Tree

Appears with

Perlvendor · 1
SQL::Abstract::Treeproduct · 1
CPANvendor · 1

Entities are extracted by the model from each article. First seen Nov 4, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.