41 matches found
SQL Injection
knex is vulnerable to SQL injection. Column names are not properly escaped in database dialects, allowing attackers to craft a query to the host database and access private information...