Here: https://github.com/narenaryan/Salary-API/blob/master/app.py#L25 Since there's no input validation and no use of ORM, if the department name contains SQL code, your database is compromised.
Here: https://github.com/narenaryan/Salary-API/blob/master/app.py#L25
Since there's no input validation and no use of ORM, if the department name contains SQL code, your database is compromised.