Security rules for Django web framework
pathfinder scan --ruleset cpf/python/django
SQL injection vulnerability: User input flows to cursor.execute() without parameterization within a function. Use parameterized queries with %s placeholders.