Lucene search

K
nodejsSébastian DejongheNODEJS:66
HistoryDec 28, 2015 - 6:37 p.m.

SQL Injection

2015-12-2818:37:19
Sébastian Dejonghe
www.npmjs.com
37

0.003 Low

EPSS

Percentile

65.9%

Overview

Versions of mysql prior to 2.0.0-alpha8 are affected by a SQL Injection vulnerability in the mysql.escape() function, which does not properly escape object keys.

Recommendation

Update to version 2.0.0-alpha8 or later.

References

CPENameOperatorVersion
mysqllev2.0.0-alpha7

0.003 Low

EPSS

Percentile

65.9%