Skip to content

Security: pindinelli/QueBu

Security

SECURITY.md

Security Policy

Supported Versions

Version Supported
1.x
< 1.0

Reporting a Vulnerability

Please do not open a public issue for security vulnerabilities.

Use GitHub's Private Vulnerability Reporting feature in this repository:

  • Go to the Security tab
  • Click Report a vulnerability

Include:

  • A clear description of the issue
  • Steps to reproduce / PoC
  • Impact assessment
  • Suggested fix (if available)

Security Notes

Quebu uses prepared statements for query values and validates SQL identifiers. UPDATE and DELETE without WHERE are blocked by default unless explicitly overridden with allowUnsafeWrites(true).

There aren't any published security advisories