Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function.