All rules →
Rules / Go
SHIELD-GO-001

SQL Injection via string formatting

criticalGoCWE-89CVSS 9.8

What it detects

SQL query built with fmt.Sprintf or string concatenation may allow SQL injection.

How to fix

Use parameterized queries with ? or $N placeholders instead of fmt.Sprintf.

Scan your repo freeFull documentation
Back to all rules
SHIELD-GO-001: SQL Injection via string formatting — Zennoxa Shield