GHSA-8f93-rv4p-x4jw

Опубликовано: 12 июн. 2019

Источник: github

Github: Прошло ревью

Описание

SQL Injection in sql

All versions of sql are vulnerable to sql injection as it does not properly escape parameters when building SQL queries.

No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available.

Наименование

sql

npm

Затронутые версииВерсия исправления

<= 0.78.0

Отсутствует

CWE-89

CWE-89