CRITICALSQL injection in search query
src/api/search.ts:38 · Security
- const q = "SELECT * FROM users WHERE name = '" + name + "'"
+ const q = "SELECT * FROM users WHERE name = $1"
+ const rows = await db.query(q, [name])
▸ Fix submitted as PR #847 · 13/13 checks passed