CVE-2024-44905: go-pg SQL injection vulnerability via the component /types/append_value.go

Currently go-pg/pg package contains a SQL injection vulnerability in the component /types/append_value.go. https://github.com/go-pg/pg/blob/30e7053c6cacdd44d06cf2b92183b49188b7c922/types/append_value.go#L151 The vulnerability allows an attacker to inject SQL queries by manipulating line comments in PostgreSQL. When running in simple query mode, the library incorrectly handles parameter values that can create SQL line comments (--), potentially allowing syntax modification of the original query. More details: https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/