Lucene search

K
osvGoogleOSV:GHSA-58V4-QWX5-7F59
HistoryOct 21, 2019 - 4:12 p.m.

SQL Injection in knex

2019-10-2116:12:13
Google
osv.dev
7

0.002 Low

EPSS

Percentile

59.5%

knex.js versions before 0.19.5 are vulnerable to SQL Injection attack. Identifiers are escaped incorrectly as part of the MSSQL dialect, allowing attackers to craft a malicious query to the host DB.

CPENameOperatorVersion
knexlt0.19.5

0.002 Low

EPSS

Percentile

59.5%