When parameterization fails: SQL injection in Nim's db_postgres module using parameterized queries

I discovered a potential SQL injection vulnerability in Nim's standard library module db_postgres . This affects applications using this module with older PostgreSQL databases or configurations where standard_conforming_strings is disabled.