andre/crewAI
1
0
Fork 0
mirror of https://github.com/crewAIInc/crewAI.git synced 2026-01-11 00:58:30 +00:00
Code Issues Actions 5 Packages Projects Releases Wiki Activity

Fix SQL injection vulnerability in cache cleanup

Browse Source 
Co-Authored-By: Joe Moura <joao@crewai.com>
This commit is contained in:
Devin AI
2025-05-05 22:44:18 +00:00
parent 62de5a7989
commit 223683d8bd
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/crewai/memory/storage/llm_response_cache_storage.py
View File

@@ -228,10 +228,11 @@ class LLMResponseCacheStorage:
logger.info("Deleting all cache entries (max_age_days <= 0)") logger.info("Deleting all cache entries (max_age_days <= 0)")
else: else:
cursor.execute( cursor.execute(
f"""
DELETE FROM llm_response_cache
WHERE timestamp < datetime('now', '-{max_age_days} days')
""" """
DELETE FROM llm_response_cache
WHERE timestamp < datetime('now', ? || ' days')
""",
(f"-{max_age_days}",)
) )
deleted_count = cursor.rowcount deleted_count = cursor.rowcount