Lucene search

K
osvGoogleOSV:GHSA-CGPP-WM2H-6HQX
HistoryFeb 18, 2019 - 11:54 p.m.

SQL Injection in waterline-sequel

2019-02-1823:54:28
Google
osv.dev
6

0.005 Low

EPSS

Percentile

76.5%

Affected versions of waterline-sequel are vulnerable to SQL injection in cases where user input is passed into the like, contains, startsWith, or endsWith methods.

Recommendation

Upgrade to at least version 0.5.1

CPENameOperatorVersion
waterline-sequellt0.5.1

0.005 Low

EPSS

Percentile

76.5%

Related for OSV:GHSA-CGPP-WM2H-6HQX