CWE Reference

CWE for sql

Browse cwe for sql with official CWE context and Glexia analysis.

Release starter-2026-05listing

Search And Filters

Browse CWE records

CWE-89 Weakness Base

CWE-89: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection is a software weakness pattern tracked by CWE 89. The local starter record is replaced by the official MITRE CWE import when the sync pipeline runs.

SQL Java PHP Python Implementation