WS-2017-0152

Affected versions of the foundation-sites package are vulnerable to SQL Injection due to not properly escaping the startkey/endkey in the allDocs function...

@greenhousegames/firebase-reporting-jquery (0.1.0), @maxdome/component-common-styles (2.26.0) +22 more potentially affected by CVE-2020-26304 via foundation-sites (>=6.2.0, <=6.3.1)

foundation-sites NPM version =6.2.0, =4.0.0-beta.2, =0.0.1, =1.0.0-dev.20161219T192728Z.df3de96, =0.0.1, =0.0.0-semantically-released, =0.5010.0, =1.0.0, =0.8.0, =0.14.0, =0.0.12, =1.3.3 and more Source cves: CVE-2020-26304 Source advisory: GHSA-P8PC-3F7W-JR5Q...

@greenhousegames/firebase-reporting-jquery (0.1.0), @maxdome/component-common-styles (2.26.0) +22 more potentially affected by CVE-2020-26304 via foundation-sites (>=6.2.0, <=6.3.1)

foundation-sites NPM version =6.2.0, =4.0.0-beta.2, =0.0.1, =1.0.0-dev.20161219T192728Z.df3de96, =0.0.1, =0.0.0-semantically-released, =0.5010.0, =1.0.0, =0.8.0, =0.14.0, =0.0.12, =1.3.3 and more Source cves: CVE-2020-26304 Source advisory: OSV:GHSA-P8PC-3F7W-JR5Q...