SQL Injection

org.geotools.jdbc, gt-jdbc-postgis is vulnerable to SQL injection. The vulnerability is due to the jsonArrayContains function failing to escape user-supplied values in generated SQL queries, which allows an attacker to inject malicious SQL through OGC filters when using the PostGIS DataStore with...