Flight Log / antiwork/gumroad #636
Fix potential SQL injection vulnerability in AudienceMember.filter type parameter — a Devin (Cognition) bot flight
The Devin bot (Cognition) opened this pull request in antiwork/gumroad on Jul 15, 2025; merged clean in 2.3 h, merged by @ershad: +78 −7, 8 files, 0 reviews.
Flown by
- Lines
- +78 −7
- Files
- 8
- Commits
- 2
- Reviews
- 0
- To merge
- 2.3 h
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
Devin opened a fix for a SQL injection flaw in AudienceMember.filter, where the type parameter was interpolated into SQL without validation. The change adds 78 lines and removes seven across eight files, in two commits. The pull request merged cleanly, with no changes requested, in 2.33 hours to merge.
From the pull request description
# Fix SQL injection vulnerability in AudienceMember.filter type parameter ## Summary This PR fixes a critical SQL injection vulnerability in the `AudienceMember.filter` method where the `type` parameter was being directly interpolated into SQL without validation. The vulnerability existed on line …
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedDevin AI
- —committedErshad Kunnakkadan
- Jul 15, 2025mergedershad
- Jul 15, 2025closedershad
Read next
Cite this flight: AgentRiders Flight Log, antiwork/gumroad#636, record updated Nov 4, 2026, https://agentriders.com/logs/antiwork/gumroad/636/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.