<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>devtake.dev — #sql-injection</title><description>Articles tagged sql-injection on devtake.dev.</description><link>https://devtake.dev/</link><language>en-us</language><item><title>Metabase&apos;s password-reset endpoint handed out admin, and Framework had to email every customer</title><link>https://devtake.dev/article/metabase-sqli-zero-day-breach/</link><guid isPermaLink="true">https://devtake.dev/article/metabase-sqli-zero-day-breach/</guid><description>A CVSS 10.0 SQL injection in Metabase was exploited from August 3. Framework told every customer their data was taken. Tally lost emails and password hashes.</description><pubDate>Mon, 10 Aug 2026 08:15:00 GMT</pubDate><category>security</category><category>security</category><category>zero-day</category><category>data-breach</category><category>credential-theft</category><category>supply-chain</category><category>sql-injection</category><category>open-source</category><category>dev-tools</category><author>luca-reinhardt</author></item></channel></rss>