CVE-2023-39654

The CVE-2023-39654 entry details a SQL injection in the Python package abupy up to v0.4.0, exploiting the function component abupy.MarketBu.ABuSymbol.search_to_symbol_dict. The root cause is input handling in this component, enabling untrusted input to affect SQL queries. Affected versions are up...