GHSA-9pc9-4crj-mhpj: stigmem-node's Postgres schema identifier handling required defensive quoting
Postgres backend schema identifiers were interpolated into SQL strings. In the reviewed code path the schema value is operator-controlled, but the pattern was unsafe if future call sites allowed tenant or request-controlled schema names. Impacted users are operators using the Postgres backend in affected versions.
References
Code Behaviors & Features
Detect and mitigate GHSA-9pc9-4crj-mhpj with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →