Files
frigate/frigate
ryzendigo aea91a91d5 fix: use parameterized query in get_face_ids to prevent SQL injection (#22500)
The name parameter was interpolated directly into the SQL query via
f-string, allowing SQL injection through crafted face name values.

Use a parameterized query with ? placeholder instead.
2026-03-16 17:23:44 -06:00
..
2026-03-04 15:53:20 -07:00
2026-03-04 10:07:34 -06:00
2025-08-26 08:11:37 -05:00
2026-03-15 07:26:36 -05:00
2026-03-04 10:07:34 -06:00
2026-03-04 10:07:34 -06:00
2026-03-04 10:07:34 -06:00
2021-01-26 21:40:33 -06:00
2026-03-04 10:07:34 -06:00
2026-02-03 13:29:52 -06:00
2026-03-04 10:07:34 -06:00
2026-03-04 10:07:34 -06:00