CVE-2026-121009

The SQL::Abstract Perl module (versions 1.90_01 through 2.000001_03 ) contains a vulnerability where the injection_guard check is bypassed when providing function names via the explicit { -func => [ $name, ... ] } form. While the { -name => ... } shorthand correctly triggers the guard, the ...