AIKIDO-2026-10508

TL;DR

Affected versions of this package allowed overly permissive COUNT(*) query patterns, where the validation regex was not anchored and did not enforce the expected as count alias, potentially letting crafted SQL fragments bypass the intended format restriction. An attacker able to influence the counted expression could abuse this weak validation to inject or append unintended SQL into count-based queries, which may lead to query manipulation, authorization bypass in query-building logic, or exposure of unintended database behavior.