400016 - Language Sql SELECT and user controlled

This might not be vulnerable if the variable is not user controlled. This is not always checked, which is why the
severity is 'Interesting'.