SQL Injection

Overview

Affected versions of waterline-sequel are vulnerable to SQL injection in cases where user input is passed into the like, contains, startsWith, or endsWith methods.

Recommendation

Upgrade to at least version 0.5.1

References

• Issue #1219
• PR #66
• GitHub Advisory