#select
| app.py:23:20:23:24 | query | app.py:20:18:20:21 | name | app.py:23:20:23:24 | query | This SQL query depends on a $@. | app.py:20:18:20:21 | name | user-provided value |
| app.py:30:20:30:24 | query | app.py:27:19:27:22 | name | app.py:30:20:30:24 | query | This SQL query depends on a $@. | app.py:27:19:27:22 | name | user-provided value |
| app.py:44:20:44:24 | query | app.py:41:19:41:22 | name | app.py:44:20:44:24 | query | This SQL query depends on a $@. | app.py:41:19:41:22 | name | user-provided value |
| app.py:51:20:51:24 | query | app.py:48:19:48:22 | name | app.py:51:20:51:24 | query | This SQL query depends on a $@. | app.py:48:19:48:22 | name | user-provided value |
| sql_injection.py:21:24:21:77 | BinaryExpr | sql_injection.py:14:15:14:22 | username | sql_injection.py:21:24:21:77 | BinaryExpr | This SQL query depends on a $@. | sql_injection.py:14:15:14:22 | username | user-provided value |
| sql_injection.py:24:38:24:95 | BinaryExpr | sql_injection.py:14:15:14:22 | username | sql_injection.py:24:38:24:95 | BinaryExpr | This SQL query depends on a $@. | sql_injection.py:14:15:14:22 | username | user-provided value |
| sql_injection.py:25:26:25:83 | BinaryExpr | sql_injection.py:14:15:14:22 | username | sql_injection.py:25:26:25:83 | BinaryExpr | This SQL query depends on a $@. | sql_injection.py:14:15:14:22 | username | user-provided value |
| sql_injection.py:26:28:26:85 | BinaryExpr | sql_injection.py:14:15:14:22 | username | sql_injection.py:26:28:26:85 | BinaryExpr | This SQL query depends on a $@. | sql_injection.py:14:15:14:22 | username | user-provided value |
| sqlalchemy_textclause.py:27:28:27:87 | Attribute() | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:27:28:27:87 | Attribute() | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:31:50:31:72 | Attribute() | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:31:50:31:72 | Attribute() | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:41:26:41:33 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:41:26:41:33 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:42:31:42:38 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:42:31:42:38 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:43:30:43:37 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:43:30:43:37 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:44:35:44:42 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:44:35:44:42 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:45:41:45:48 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:45:41:45:48 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:46:46:46:53 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:46:46:46:53 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:47:47:47:54 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:47:47:47:54 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:48:52:48:59 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:48:52:48:59 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:50:18:50:25 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:50:18:50:25 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
| sqlalchemy_textclause.py:51:24:51:31 | username | sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:51:24:51:31 | username | This SQL query depends on a $@. | sqlalchemy_textclause.py:23:15:23:22 | username | user-provided value |
edges
| app.py:20:18:20:21 | name | app.py:21:5:21:9 | query | provenance |  |
| app.py:21:5:21:9 | query | app.py:23:20:23:24 | query | provenance |  |
| app.py:27:19:27:22 | name | app.py:28:5:28:9 | query | provenance |  |
| app.py:28:5:28:9 | query | app.py:30:20:30:24 | query | provenance |  |
| app.py:41:19:41:22 | name | app.py:42:5:42:9 | query | provenance |  |
| app.py:42:5:42:9 | query | app.py:44:20:44:24 | query | provenance |  |
| app.py:48:19:48:22 | name | app.py:49:5:49:9 | query | provenance |  |
| app.py:49:5:49:9 | query | app.py:51:20:51:24 | query | provenance |  |
| sql_injection.py:14:15:14:22 | username | sql_injection.py:21:24:21:77 | BinaryExpr | provenance |  |
| sql_injection.py:14:15:14:22 | username | sql_injection.py:24:38:24:95 | BinaryExpr | provenance |  |
| sql_injection.py:14:15:14:22 | username | sql_injection.py:25:26:25:83 | BinaryExpr | provenance |  |
| sql_injection.py:14:15:14:22 | username | sql_injection.py:26:28:26:85 | BinaryExpr | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:27:28:27:87 | Attribute() | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:31:50:31:72 | Attribute() | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:41:26:41:33 | username | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:42:31:42:38 | username | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:43:30:43:37 | username | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:44:35:44:42 | username | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:45:41:45:48 | username | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:46:46:46:53 | username | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:47:47:47:54 | username | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:48:52:48:59 | username | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:50:18:50:25 | username | provenance |  |
| sqlalchemy_textclause.py:23:15:23:22 | username | sqlalchemy_textclause.py:51:24:51:31 | username | provenance |  |
nodes
| app.py:20:18:20:21 | name | semmle.label | name |
| app.py:21:5:21:9 | query | semmle.label | query |
| app.py:23:20:23:24 | query | semmle.label | query |
| app.py:27:19:27:22 | name | semmle.label | name |
| app.py:28:5:28:9 | query | semmle.label | query |
| app.py:30:20:30:24 | query | semmle.label | query |
| app.py:41:19:41:22 | name | semmle.label | name |
| app.py:42:5:42:9 | query | semmle.label | query |
| app.py:44:20:44:24 | query | semmle.label | query |
| app.py:48:19:48:22 | name | semmle.label | name |
| app.py:49:5:49:9 | query | semmle.label | query |
| app.py:51:20:51:24 | query | semmle.label | query |
| sql_injection.py:14:15:14:22 | username | semmle.label | username |
| sql_injection.py:21:24:21:77 | BinaryExpr | semmle.label | BinaryExpr |
| sql_injection.py:24:38:24:95 | BinaryExpr | semmle.label | BinaryExpr |
| sql_injection.py:25:26:25:83 | BinaryExpr | semmle.label | BinaryExpr |
| sql_injection.py:26:28:26:85 | BinaryExpr | semmle.label | BinaryExpr |
| sqlalchemy_textclause.py:23:15:23:22 | username | semmle.label | username |
| sqlalchemy_textclause.py:27:28:27:87 | Attribute() | semmle.label | Attribute() |
| sqlalchemy_textclause.py:31:50:31:72 | Attribute() | semmle.label | Attribute() |
| sqlalchemy_textclause.py:41:26:41:33 | username | semmle.label | username |
| sqlalchemy_textclause.py:42:31:42:38 | username | semmle.label | username |
| sqlalchemy_textclause.py:43:30:43:37 | username | semmle.label | username |
| sqlalchemy_textclause.py:44:35:44:42 | username | semmle.label | username |
| sqlalchemy_textclause.py:45:41:45:48 | username | semmle.label | username |
| sqlalchemy_textclause.py:46:46:46:53 | username | semmle.label | username |
| sqlalchemy_textclause.py:47:47:47:54 | username | semmle.label | username |
| sqlalchemy_textclause.py:48:52:48:59 | username | semmle.label | username |
| sqlalchemy_textclause.py:50:18:50:25 | username | semmle.label | username |
| sqlalchemy_textclause.py:51:24:51:31 | username | semmle.label | username |
subpaths