silverstripe/sapphire — pull request #1308 by ss23 (2013-03-19 11:45:58+00:00)
Title: BUG SQL Injection in CsvBulkLoader (fixes #6227)

Diff should speak for itself, looks like this will have to be implemented in all supported branches.