mirror of
https://github.com/hashicorp/vault.git
synced 2026-05-19 16:56:57 -04:00
* VAULT-43691 - Fix SQL injection risk in HANA and Redshift DeleteUser revoke paths (#13741) HANA now safely quotes usernames as identifiers, and Redshift safely quotes usernames as string literals before constructing revoke/delete SQL. Added regression tests to ensure crafted usernames cannot inject additional SQL and that only the targeted user is deleted. |
||
|---|---|---|
| .. | ||
| cassandra | ||
| hana | ||
| influxdb | ||
| mongodb | ||
| mssql | ||
| mysql | ||
| postgresql | ||
| redshift | ||