Hi

maximebf/debugbar v1.15.1
barryvdh/laravel-debugbar v3.2.8

in timeline tab, bottom table

sample query

\DB::statement("SELECT * FROM users WHERE id = '<script>debugger;alert(5);</script>' OR SLEEP(2)");

possible source - unescaped aggregate.label
https://github.com/maximebf/php-debugbar/blob/1a1605b8e9bacb34cc0c6278206d699772e1d372/src/DebugBar/Resources/widgets.js#L506