There is 1 open security issue in bookworm.
1 issue left for the package maintainer to handle:
- CVE-2025-54119:
(needs triaging)
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versions 5.22.9 and below, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a sqlite3 database and calls the metaColumns(), metaForeignKeys() or metaIndexes() methods with a crafted table name. This is fixed in version 5.22.10. To workaround this issue, only pass controlled data to metaColumns(), metaForeignKeys() and metaIndexes() method's $table parameter.
You can find information about how to handle this issue in the security team's documentation.
1 issue that should be fixed with the next stable update:
- CVE-2025-46337:
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a query parameter may allow an attacker to execute arbitrary SQL statements when the code using ADOdb connects to a PostgreSQL database and calls pg_insert_id() with user-supplied data. This issue has been patched in version 5.22.9.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/libp/libphp-adodb.png){kind=link}