Index/CWE-89
CWE-89 register.
91 model facts reference this weakness class. CWE labels are carried through from the Atropos model pack without collapsing distinct symbols.
SymbolLanguageKindRole
PQescapeLiteralc / stdlibsql-injectionsanitizerPQescapeStringConnc / stdlibsql-injectionsanitizerPQexecc / stdlibsql-injectionsinkPQexecParamsc / stdlibsql-injectionsinkPQpreparec / stdlibsql-injectionsinkmysql_queryc / stdlibsql-injectionsinkmysql_real_escape_stringc / stdlibsql-injectionsanitizermysql_real_queryc / stdlibsql-injectionsinksqlite3_execc / stdlibsql-injectionsinksqlite3_get_tablec / stdlibsql-injectionsinksqlite3_preparec / stdlibsql-injectionsinksqlite3_prepare_v2c / stdlibsql-injectionsinkexecjavascript / stdlibsql-injectionsinkpreparejavascript / stdlibsql-injectionsinkqueryjavascript / stdlibsql-injectionsinkqueryjavascript / stdlibsql-injectionsinkrawjavascript / knexsql-injectionsinkescapejavascript / mysqlsql-injectionsanitizerexecutejavascript / stdlibsql-injectionsinkqueryjavascript / stdlibsql-injectionsinkqueryjavascript / stdlibsql-injectionsinkqueryjavascript / stdlibsql-injectionsinkqueryjavascript / sequelizesql-injectionsinkalljavascript / stdlibsql-injectionsinkgetjavascript / stdlibsql-injectionsinkrunjavascript / stdlibsql-injectionsinkescapejavascript / sqlstringsql-injectionsanitizer$executeRawUnsafejavascript / stdlibsql-injectionsink$queryRawUnsafejavascript / stdlibsql-injectionsinkexecutepython / stdlibsql-injectionsinkfetchpython / stdlibsql-injectionsinkfloatpython / builtinssql-injectionsanitizerintpython / builtinssql-injectionsanitizerexecutepython / stdlibsql-injectionsinkexecutemanypython / stdlibsql-injectionsinkexecutescriptpython / stdlibsql-injectionsinkexecutepython / django.db.backends.mysql.base.CursorWrappersql-injectionsinkexecutemanypython / django.db.backends.mysql.base.CursorWrappersql-injectionsinkexecutepython / django.db.backends.utils.CursorWrappersql-injectionsinkexecutemanypython / django.db.backends.utils.CursorWrappersql-injectionsinkRawSQLpython / django.db.models.expressionssql-injectionsinkrawpython / django.db.models.manager.Managersql-injectionsinkextrapython / django.db.models.query.QuerySetsql-injectionsinkextrapython / django.db.models.query.QuerySetsql-injectionsinkextrapython / django.db.models.query.QuerySetsql-injectionsinkexecutepython / stdlibsql-injectionsinkread_sqlpython / pandassql-injectionsinkread_sql_querypython / pandassql-injectionsinkexecute_sqlpython / stdlibsql-injectionsinkRawQuerypython / peeweesql-injectionsinkIdentifierpython / psycopg2.sqlsql-injectionsanitizerLiteralpython / psycopg2.sqlsql-injectionsanitizerextrapython / stdlibsql-injectionsinkrawpython / stdlibsql-injectionsinkexec_driver_sqlpython / stdlibsql-injectionsinkexecutepython / stdlibsql-injectionsinktextpython / sqlalchemysql-injectionsinkexecutepython / sqlite3.Connectionsql-injectionsinkexecutemanypython / sqlite3.Connectionsql-injectionsinkexecutescriptpython / sqlite3.Connectionsql-injectionsinkexecutepython / sqlite3.Cursorsql-injectionsinkexecutemanypython / sqlite3.Cursorsql-injectionsinkexecutescriptpython / sqlite3.Cursorsql-injectionsinkexectypescript / stdlibsql-injectionsinkpreparetypescript / stdlibsql-injectionsinkquerytypescript / stdlibsql-injectionsinkrawtypescript / drizzle-ormsql-injectionsinkquerytypescript / stdlibsql-injectionsinkfromRawtypescript / knexsql-injectionsinkhavingRawtypescript / knexsql-injectionsinkorderByRawtypescript / knexsql-injectionsinkrawtypescript / knexsql-injectionsinkwhereRawtypescript / knexsql-injectionsinkescapetypescript / mysqlsql-injectionsanitizerexecutetypescript / stdlibsql-injectionsinkquerytypescript / stdlibsql-injectionsinkquerytypescript / stdlibsql-injectionsinkquerytypescript / stdlibsql-injectionsinkandWheretypescript / stdlibsql-injectionsinkhavingtypescript / stdlibsql-injectionsinkorderBytypescript / stdlibsql-injectionsinkorWheretypescript / stdlibsql-injectionsinkwheretypescript / stdlibsql-injectionsinkliteraltypescript / sequelizesql-injectionsinkquerytypescript / sequelizesql-injectionsinkalltypescript / stdlibsql-injectionsinkgettypescript / stdlibsql-injectionsinkruntypescript / stdlibsql-injectionsinkescapetypescript / sqlstringsql-injectionsanitizer$executeRawUnsafetypescript / stdlibsql-injectionsink$queryRawUnsafetypescript / stdlibsql-injectionsink