mysql node module SQL injection vulnerability

The mysql node module is a node.js driver for MySQL written in JavaScript. A SQL injection vulnerability exists in the 'mysql.escape' function in mysql node module version 2.0.0-alpha7 and earlier, which stems from the program's failure to properly encode object keys. A remote attacker can exploi...

CVE-2015-9244: Improper Neutralization of Special Elements used in an SQL Command

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with mysql.escape which could lead to SQL Injection...