PT-2026-69292

Name of the Vulnerable Software and Affected Versions dresende node-sql-query versions 0.1.25 through 0.1.28 Description A SQL injection issue exists in the Request Parameter Handler component within the lib/Select.js library. The flaw is located in the SelectQuery.from and SelectQuery.build...

CVE-2026-19351: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/SelectQuery.build in the library lib/Select.js of the component Request Parameter Handler. Performing a manipulation results in sql injection. It is...