From 05228aee78963af4600287d875ce31848c1d8f4f Mon Sep 17 00:00:00 2001 From: anupamme Date: Sun, 6 Sep 2026 06:38:16 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by OrbisAI Security --- app/db/db_flag.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/db/db_flag.py b/app/db/db_flag.py index 92f7e10..5e1672a 100644 --- a/app/db/db_flag.py +++ b/app/db/db_flag.py @@ -68,7 +68,7 @@ def get_flag_from_db(self, index_name): result = False try: c = self.conn.cursor() - c.execute("SELECT * FROM FLAG WHERE index_name = '%s'" % index_name) + c.execute("SELECT * FROM FLAG WHERE index_name = ?", (index_name,)) i = c.fetchone() if i is None: LOG.warning("Can not find the flag in db[%s], so i will return None", index_name)