All rules →
Rules / Go
SHIELD-GO-002

SQL Injection via string concatenation

criticalGoCWE-89CVSS 9.8

What it detects

Building SQL with + concatenation allows injection.

How to fix

Use parameterized queries. Never concatenate user input into SQL strings.

Scan your repo freeFull documentation
Back to all rules
SHIELD-GO-002: SQL Injection via string concatenation — Zennoxa Shield