/ 
DBIx-QuickORM-0.000009-TRIAL
⭐ Starred 0
Security Advisories (1)
CVE-2026-13766 (2026-06-30)

DBIx::QuickORM versions before 0.000026 for Perl allow SQL injection via unquoted SQL identifiers. The default SQL builder, a SQL::Abstract subclass, sets bindtype in its constructor but never quote_char, so SQL::Abstract emits identifiers verbatim. Caller-supplied identifiers (order_by, where-clause column keys, field and returning lists, upsert columns, and join aliases) reach the SQL string raw, while values are placeholder-bound and unaffected. A caller that forwards untrusted input to an affected identifier position, such as a user-controlled order_by value, enables SQL injection: the row order can be made to depend on a sub-select over columns the query never selected, and the where and update identifier positions permit further data disclosure and tampering.

Changes for version 0.000009 - 2025-05-06 (TRIAL RELEASE)

Changes for version 0.000008 - 2025-05-02 (TRIAL RELEASE)

Changes for version 0.000007 - 2025-05-02 (TRIAL RELEASE)

Documentation

README.md
template

Modules

DBIx::QuickORM
Composable ORM builder.
DBIx::QuickORM::Util::HashBase
Build hash based classes.

Provides

DBIx::QuickORM::Affinity
in lib/DBIx/QuickORM/Affinity.pm
DBIx::QuickORM::Connection
in lib/DBIx/QuickORM/Connection.pm
DBIx::QuickORM::Connection::Aside
in lib/DBIx/QuickORM/Connection/Aside.pm
DBIx::QuickORM::Connection::Async
in lib/DBIx/QuickORM/Connection/Async.pm
DBIx::QuickORM::Connection::RowData
in lib/DBIx/QuickORM/Connection/RowData.pm
DBIx::QuickORM::Connection::Transaction
in lib/DBIx/QuickORM/Connection/Transaction.pm
DBIx::QuickORM::DB
in lib/DBIx/QuickORM/DB.pm
DBIx::QuickORM::Dialect
in lib/DBIx/QuickORM/Dialect.pm
DBIx::QuickORM::Dialect::MySQL
in lib/DBIx/QuickORM/Dialect/MySQL.pm
DBIx::QuickORM::Dialect::MySQL::Community
in lib/DBIx/QuickORM/Dialect/MySQL/Community.pm
DBIx::QuickORM::Dialect::MySQL::MariaDB
in lib/DBIx/QuickORM/Dialect/MySQL/MariaDB.pm
DBIx::QuickORM::Dialect::MySQL::Percona
in lib/DBIx/QuickORM/Dialect/MySQL/Percona.pm
DBIx::QuickORM::Dialect::PostgreSQL
in lib/DBIx/QuickORM/Dialect/PostgreSQL.pm
DBIx::QuickORM::Dialect::SQLite
in lib/DBIx/QuickORM/Dialect/SQLite.pm
DBIx::QuickORM::Iterator
in lib/DBIx/QuickORM/Iterator.pm
DBIx::QuickORM::Join
in lib/DBIx/QuickORM/Join.pm
DBIx::QuickORM::Join::Row
in lib/DBIx/QuickORM/Join/Row.pm
DBIx::QuickORM::Link
in lib/DBIx/QuickORM/Link.pm
DBIx::QuickORM::ORM
in lib/DBIx/QuickORM/ORM.pm
DBIx::QuickORM::Plugin
in lib/DBIx/QuickORM/Plugin.pm
DBIx::QuickORM::Query
in lib/DBIx/QuickORM/Query.pm
DBIx::QuickORM::Role::Async
in lib/DBIx/QuickORM/Role/Async.pm
DBIx::QuickORM::Role::Handle
in lib/DBIx/QuickORM/Role/Handle.pm
DBIx::QuickORM::Role::Linked
in lib/DBIx/QuickORM/Role/Linked.pm
DBIx::QuickORM::Role::Query
in lib/DBIx/QuickORM/Role/Query.pm
DBIx::QuickORM::Role::Row
in lib/DBIx/QuickORM/Role/Row.pm
DBIx::QuickORM::Role::SQLASource
in lib/DBIx/QuickORM/Role/SQLASource.pm
DBIx::QuickORM::Role::Type
in lib/DBIx/QuickORM/Role/Type.pm
DBIx::QuickORM::Row
in lib/DBIx/QuickORM/Row.pm
DBIx::QuickORM::Row::Async
in lib/DBIx/QuickORM/Row/Async.pm
DBIx::QuickORM::RowManager
in lib/DBIx/QuickORM/RowManager.pm
DBIx::QuickORM::RowManager::Cached
in lib/DBIx/QuickORM/RowManager/Cached.pm
DBIx::QuickORM::SQLAbstract
in lib/DBIx/QuickORM/SQLAbstract.pm
DBIx::QuickORM::Schema
in lib/DBIx/QuickORM/Schema.pm
DBIx::QuickORM::Schema::Autofill
in lib/DBIx/QuickORM/Schema/Autofill.pm
DBIx::QuickORM::Schema::Table
in lib/DBIx/QuickORM/Schema/Table.pm
DBIx::QuickORM::Schema::Table::Column
in lib/DBIx/QuickORM/Schema/Table/Column.pm
DBIx::QuickORM::Schema::View
in lib/DBIx/QuickORM/Schema/View.pm
DBIx::QuickORM::Select
in lib/DBIx/QuickORM/Select.pm
DBIx::QuickORM::Source
in lib/DBIx/QuickORM/Source.pm
DBIx::QuickORM::Type::JSON
in lib/DBIx/QuickORM/Type/JSON.pm
DBIx::QuickORM::Type::UUID
in lib/DBIx/QuickORM/Type/UUID.pm
DBIx::QuickORM::Util
in lib/DBIx/QuickORM/Util.pm

Other files