Django got hit with an SQL injection vulnerability just the other day. I basically fell out of my chair when I saw it.