> How is SQL vulnerabilities like this still happening to systems that need to be secure? Because third party code review wasn't a requirement in the contract

> How is SQL vulnerabilities like this still happening to systems that need to be secure? Because third party code review wasn't a requirement in the contract or spec. How anyone these days accepts code from a vendor, verifies that it works, and then puts it into production and pays the contract baffles me.