DBIx::QuickORM vulnerabilities

1 known vulnerability in DBIx::QuickORM from EXODIST. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  DBIx::QuickORM: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-13766Jun 30, 2026EXODIST

  DBIx::QuickORM versions before 0.000026 for Perl allow SQL injection via unquoted SQL identifiers. The default SQL builder, a SQL::Abstract subclass, sets bindtype in its constructor but never quote_char, so SQL::Abstract emits identifiers verbatim. Caller-sup