CVE-2026-121007

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-121007
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-121007.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-121007
Downstream
Related
Published
2026-11-04T14:35:55Z
Modified
2026-11-07T17:27:16Z
Summary
SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an identifier position
Details

SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow SQL injection via the where values of a nested statement in an identifier position.

A nested statement such as { -select => ... } in a position where plain scalars are identifiers treats its own plain scalars as identifiers too. These positions are the select list, ORDER BY, GROUP BY, RETURNING, and with the ExtraClauses plugin FROM (-as) and JOIN (to). The values of the statement's where, having and set clauses, and the rows of a -values, go into the SQL text instead of the bind list, unescaped unless quote_char is set. Subselects in a WHERE condition are not affected.

An application that passes untrusted input as a where value of such a nested statement, expecting it to be bound, allows SQL injection.

Database specific 
{
    "cna_assigner": "CPANSec",
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/121xxx/CVE-2026-121007.json"
}
References

Affected packages

Git / github.com/dbsrgits/sql-abstract

Affected ranges

Type
GIT
Repo
https://github.com/dbsrgits/sql-abstract
Events
Introduced
a2827243610982d61fe853699bc6f4641b1c64ff
Fixed
d01770bf97b963a02acc11bf5834cba881c6e504
Fixed
79fc34e874b4edb441154eccddb04c57d5c1c90e
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "1.90_01"
                },
                {
                    "fixed": "2.000001_04"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "fixed": "79fc34e874b4edb441154eccddb04c57d5c1c90e"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-121007.json"