SQL Injection in AI-Generated Code: Why Cursor Keeps Writing It
A developer found that Cursor, an AI code editor, generated a login endpoint with a SQL injection vulnerability (CWE-89) by interpolating user input directly into a query string. The developer warns that AI models traine…