@equinor/workspace-filter (4.0.7), @equinor/workspace-powerbi (3.0.10) +70 more potentially affected by CVE-2015-9244 via mysql (>=2.0.0-alpha2, <=2.0.0-alpha7)

mysql NPM version =2.0.0-alpha2, =1.0.2, =4.49.0, =1.0.6, =0.2.0, =0.0.2, =0.1.6 and more Source cves: CVE-2015-9244 Source advisory: GHSA-FVQ6-55GV-JX9F...

@equinor/workspace-filter (4.0.7), @equinor/workspace-powerbi (3.0.10) +70 more potentially affected by CVE-2015-9244 via mysql (>=2.0.0-alpha2, <=2.0.0-alpha7)

mysql NPM version =2.0.0-alpha2, =1.0.2, =4.49.0, =1.0.6, =0.2.0, =0.0.2, =0.1.6 and more Source cves: CVE-2015-9244 Source advisory: OSV:GHSA-FVQ6-55GV-JX9F...

CVE-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with mysql.escape which could lead to SQL Injection...

CVE-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with mysql.escape which could lead to SQL Injection...

CVE-2015-9244

CVE-2015-9244 affects the mysql node module v2.0.0-alpha7 and earlier. The issue is that keys of objects are not escaped by mysql.escape(), which could enable SQL injection. Public references (OSV entries and GHSA advisories) indicate the fix is to update to 2.0.0-alpha8 or later. Exploitation de...

@equinor/workspace-filter (4.0.7), @equinor/workspace-powerbi (3.0.10) +136 more potentially affected by CVE-2015-9244 via mysql (>=0.9.2, <=2.0.0-alpha7)

mysql NPM version =0.9.2, =1.0.2, =4.49.0, =1.0.6, =0.2.0, =0.1.0, =0.1.5 and more Source cves: CVE-2015-9244 Source advisory: MEND:CVE-2015-9244...

CVE-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with mysql.escape which could lead to SQL Injection...

CVE-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with mysql.escape which could lead to SQL Injection...