While recognised and relatively simple to remedy, SQL injection in particular is a constant among the output of automated code scans, and a regular feature on industry lists of top vulnerabilities ...

Database-backed web applications grew APIs that yielded diverse XML and then JSON outputs. Programming languages grew libraries to help developers consume those outputs.

SQL Server 2025 is also introducing a native JSON datatype, which should improve performance over the current approach of storing JSON data in the VARCHAR (MAX) field.