/ 
SQL-Abstract-2.000003

Changes for version 2.000003 - 2026-11-06

  • SECURITY, CVE-2026-121265: generate() (and so AUTOLOAD with allow_autoload) also treats an arrayref in its hashref or arrayref as one bind value. 2.000002 fixed only insert(), update() and values(): generate('update t', { name => [ "(SELECT ...)" ] }) still gave UPDATE T SET name = (SELECT ...). \[ $sql, @bind ] is literal SQL in generate() too; array_datatypes => 0 restores the old behaviour.
  • every module has a $VERSION, the same as SQL::Abstract

Documentation

SECURITY.md

Modules

DBIx::Class::SQLMaker::Role::SQLA2Passthrough
A test of future possibilities
DBIx::Class::Storage::Debug::PrettyPrint
Pretty Printing DebugObj
SQL::Abstract
Generate SQL from Perl data structures
SQL::Abstract::Plugin::BangOverrides
replace a clause of a statement with a !clause key
SQL::Abstract::Plugin::ExtraClauses
new/experimental additions to SQL::Abstract
SQL::Abstract::Reference
Reference documentation for SQL::Abstract
SQL::Abstract::Role::Plugin
helpful methods for plugin authors
SQL::Abstract::Test
Helper function for testing SQL::Abstract
SQL::Abstract::Tree
Represent SQL as an AST

Provides

Chunkstrumenter
in maint/lib/Chunkstrumenter.pm
SQL::Abstract::Formatter
in lib/SQL/Abstract/Formatter.pm
SQL::Abstract::Parts
in lib/SQL/Abstract/Parts.pm

Examples

Other files