Camilova

**Name of the Vulnerable Software and Affected Versions** update by case gem versions prior to 0.1.3 **Description** The issue concerns a SQL injection vulnerability due to the use of custom, unsanitized SQL strings in the update by case gem. This vulnerability allows for potential SQL injection attacks. The gem has been updated to use Arel for constructing SQL statements, which sanitizes the input and prevents SQL injection. **Recommendations** For versions prior to 0.1.3, upgrade to version 0.1.3 or later, which uses Arel to construct the resulting SQL statement with sanitized SQL.