Skip to content

fix: SQL injection via query field name when using PostgreSQL (GHSA-c442-97qw-j6c6)#10181

Merged
mtrezza merged 1 commit intoparse-community:alphafrom
mtrezza:fix/release
Mar 11, 2026
Merged

fix: SQL injection via query field name when using PostgreSQL (GHSA-c442-97qw-j6c6)#10181
mtrezza merged 1 commit intoparse-community:alphafrom
mtrezza:fix/release

Conversation

@mtrezza
Copy link
Member

@mtrezza mtrezza commented Mar 11, 2026

Trigger release for #10177; missing commit type did not trigger release.

@parse-github-assistant
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title fix: releas fix: Releas Mar 11, 2026
@parse-github-assistant
Copy link

parse-github-assistant bot commented Mar 11, 2026

🚀 Thanks for opening this pull request! We appreciate your effort in improving the project. Please let us know once your pull request is ready for review.

Note

Please respond to review comments from AI agents just like you would to comments from a human reviewer. Let the reviewer resolve their own comments, unless they have reviewed and accepted your commit, or agreed with your explanation for why the feedback was incorrect.

Caution

Pull requests must be written using an AI agent with human supervision. Pull requests written entirely by a human will likely be rejected, because of lower code quality, higher review effort and the higher risk of introducing bugs. Please note that AI review comments on this pull request alone do not satisfy this requirement.

@parseplatformorg
Copy link
Contributor

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@mtrezza mtrezza changed the title fix: Releas fix: SQL injection via query field name when using PostgreSQL (GHSA-c442-97qw-j6c6) Mar 11, 2026
@mtrezza mtrezza merged commit be281b1 into parse-community:alpha Mar 11, 2026
3 checks passed
@mtrezza mtrezza deleted the fix/release branch March 11, 2026 14:39
parseplatformorg pushed a commit that referenced this pull request Mar 11, 2026
# [9.6.0-alpha.10](9.6.0-alpha.9...9.6.0-alpha.10) (2026-03-11)

### Bug Fixes

* SQL injection via query field name when using PostgreSQL ([GHSA-c442-97qw-j6c6](GHSA-c442-97qw-j6c6)) ([#10181](#10181)) ([be281b1](be281b1))
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 9.6.0-alpha.10

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

state:released-alpha Released as alpha version

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants