CVE-2026-13766

The DBIx::QuickORM Perl library (versions prior to 0.000026 ) is vulnerable to SQL injection because its default SQL builder, a SQL::Abstract subclass, fails to set the quote_char in its constructor. This causes the builder to emit identifiers verbatim into generated queries. While values are cor...