CPE
SQL::Abstract versions before 2.000003 contain an SQL injection vulnerability arising from improper handling of arrayref column values during insert and update operations.