CVE-2026-13766

DBIx::QuickORM versions prior to 0.000026 for Perl are vulnerable to SQL injection because the default SQL builder (a SQL::Abstract subclass) fails to set the quote_char in its constructor. This causes SQL identifiers to be emitted verbatim into generated queries while only values are placeholder...