All rules →
Rules / Python
SHIELD-PY-002

SQL Injection via f-string interpolation

criticalPythonCWE-89CVSS 9.8

What it detects

Using f-strings to construct SQL queries allows injection attacks.

How to fix

Use parameterized queries. Never interpolate values directly into SQL strings.

Scan your repo freeFull documentation
Back to all rules
SHIELD-PY-002: SQL Injection via f-string interpolation — Zennoxa Shield