Python: Aiopg.qll misses some SQL injection sinks in aiopg #20111
Description
When analyzing Python code for potential SQL injection vulnerabilities using CodeQL, I noticed that some sink points related to aiopg are not recognized within the current CodeQL library.
import asyncio
import aiopg
DB_CONFIG = {
"user": "your_user",
"database": "your_database",
"host": "127.0.0.1",
"password": "your_password",
"port": 5432
}
async def connect_and_query():
async with aiopg.create_pool(**DB_CONFIG) as pool:
async with pool.acquire() as conn:
async with conn.cursor() as cursor:
await cursor.execute("SELECT * FROM your_table") # sink point !
result = await cursor.fetchall()
print("Query Result:", result)The issue seems to originate from the Aiopg.qll file (python/ql/lib/semmle/python/frameworks/Aiopg.qll). I want to update this file to fix this issue.