Merge pull request from GHSA-5248-h45p-9pgw

openclarity · Jul 11, 2024 · 1d11788 · 1d11788
1 parent 5f6b411
commit 1d11788
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/backend/pkg/database/id_view.go b/backend/pkg/database/id_view.go
@@ -76,8 +76,8 @@ func (i *IDsViewHandler) GetIDs(params GetIDsParams, idsShouldMatch bool) ([]str
 	if idsShouldMatch {
 		for _, id := range params.FilterIDs {
 			// for each OR filter we need to verify that lookup id column is not null to avoid failing during Find
-			tx.Or(fmt.Sprintf("%s = '%s' AND %s is not null", filterIDColumnName, id,
-				lookupIDColumnName))
+			tx.Or("? = ? AND ? is not null", filterIDColumnName, id,
+				lookupIDColumnName)
 		}
 	} else {
 		for _, id := range params.FilterIDs {