SQL::Abstract versions from 1.90_01 up to but not including 2.000001_04 for Perl contain a vulnerability where the injection_guard check is skipped for function names passed using the -func parameter. This allows untrusted function names to be inserted into SQL queries without proper sanitization, potentially leading to SQL injection.