Data injection vulnerability in ActiveRecord

There is a data injection vulnerability in Active Record. Specially crafted strings can be used to save data in PostgreSQL array columns that may not be intended.

Aaron Patterson

security  rb