CVE-2026-112307 - sqlparse through 0.6.0 PHP Code Injection via output_format='php'
CVE ID :CVE-2026-112307 Published : Oct. 19, 2026, 4:17 p.m. | 1 hour, 48 minutes ago Description :sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed...