[GH-ISSUE #717] SQL injection? #352

New issue

Closed

opened 2026-02-25 23:34:01 +03:00 by kerem · 3 comments

kerem commented

2026-02-25 23:34:01 +03:00

Owner

Originally created by @MageSlayer on GitHub (Sep 9, 2023).
Original GitHub issue: https://github.com/go-shiori/shiori/issues/717

Originally assigned to: @fmartingr on GitHub.

Data

1.5.5
SQLite(???). I did nothing to setup
Devuan x64
Web interface

Describe the bug / actual behavior

Entering something like "hea;th" in search control results in "SQL logic error: fts5: syntax error near ";" (1) (500)"

Expected behavior

More qualified error or something sane

To Reproduce

See above

Screenshots

Notes

Originally created by @MageSlayer on GitHub (Sep 9, 2023). Original GitHub issue: https://github.com/go-shiori/shiori/issues/717 Originally assigned to: @fmartingr on GitHub. ## Data - 1.5.5 - SQLite(???). I did nothing to setup - Devuan x64 - Web interface ## Describe the bug / actual behavior Entering something like "hea;th" in search control results in "SQL logic error: fts5: syntax error near ";" (1) (500)" ## Expected behavior More qualified error or something sane ## To Reproduce See above ## Screenshots NA ## Notes NA

kerem

2026-02-25 23:34:01 +03:00

closed this issue
added the
type:bug

tag:security 🛡️

priority:high

database
labels

kerem commented

2026-02-25 23:34:02 +03:00

Author

Owner

@MageSlayer commented on GitHub (Sep 10, 2023):

Are you sure it's fixed?
I've tested using https://github.com/go-shiori/shiori/actions/runs/5918425180 artifacts.
Still the same error.

@MageSlayer commented on GitHub (Sep 10, 2023): Are you sure it's fixed? I've tested using https://github.com/go-shiori/shiori/actions/runs/5918425180 artifacts. Still the same error.

kerem commented

2026-02-25 23:34:02 +03:00

Author

Owner

@fmartingr commented on GitHub (Sep 12, 2023):

Can you try again with https://github.com/go-shiori/shiori/releases/tag/v1.6.0-rc.1?

@fmartingr commented on GitHub (Sep 12, 2023): Can you try again with https://github.com/go-shiori/shiori/releases/tag/v1.6.0-rc.1?

kerem commented

2026-02-25 23:34:02 +03:00

Author

Owner

@MageSlayer commented on GitHub (Sep 12, 2023):

Yes. It's fixed now. Thanks

@MageSlayer commented on GitHub (Sep 12, 2023): Yes. It's fixed now. Thanks