Hacker News Reader

Opening and querying untrusted SQLite database can lead to (remote) code execution. Original research at https://research.checkpoint.com/2019/select-code_execution-f...

That's a great writeup; the fact that a view can transform any known static query into an attacker-chosen SELECT makes the attack surface huge.