CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

CVE-2025-29744

creationtimestamp| type| source ---|---|--- 2025-06-12 17:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrggybhfun2e 2025-06-17 19:39:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18655...

CVE-2025-29744

CVE-2025-29744 affects pg-promise (Node.js PostgreSQL interface); root cause is improper handling of negative numbers, leading to SQL Injection in versions before 11.5.5. Public documents consistently describe a vulnerability in the query construction/parameter handling that can allow attacker-su...