Security Advisory
CVE-2018-18476
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.