SQL Injection

github.com/cockroachdb/cockroach is vulnerable to SQL injections. The library doesn't use placeholders for its input variables, allowing a malicious user to insert escape characters into the query to execute arbitrary SQL commands...