Threats tagged 'ghsa-4342-mj27-9p38'

The SQLSpecialColumns function in psqlODBC versions before 18.00.0006 improperly incorporates table and schema names into its catalog query without escaping them. This contrasts with other catalog functions that do perform escaping. As a result, if an application passes untrusted input to SQLSpecialColumns, it may allow execution of arbitrary SQL commands with the privileges of the database connection.