EUVD-2025-18190

Malicious code in bioql PyPI...

SQL Injection

pg-promise is vulnerable to SQL Injection. The vulnerability is due to improper handling of negative numbers, which allows an attacker to manipulate SQL queries by injecting malicious input...

CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

GHSA-FF9H-848C-4XFJ pg-promise SQL Injection vulnerability

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

@emuanalytics/flow-pipelines (>=0.0.1, <=1.4.0), @evdhiggins/airtable-sync (0.2.6) +10 more potentially affected by CVE-2025-29744 via pg-promise (>=11.0.0, <=11.5.4)

pg-promise NPM version =11.0.0, =0.0.1, =1.0.1, =1.2.1, =6.1.0-alpha.7, =2.4.46, =1.0.1, =0.29.0, =6.1.0-alpha.3, =2.0.0, =2.0.1 Source cves: CVE-2025-29744 Source advisory: OSV:GHSA-FF9H-848C-4XFJ...

CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

pg-promise 安全漏洞

pg-promise is a PostgreSQL interface for Node.js by Vitaly Tomilov Personal Developer. A security vulnerability exists in pg-promise versions prior to 11.5.5, which stems from mishandling of negative numbers and may lead to SQL injection...

CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

CVE-2025-29744

The pg-promise library (a PostgreSQL interface for Node.js) is vulnerable to SQL Injection in versions prior to 11.5.5 . The root cause is the improper handling of negative numbers , which allows for improper neutralization of special elements used in SQL commands. To remediate this vulnerability...

PT-2025-25330 · Unknown · Pg-Promise

Name of the Vulnerable Software and Affected Versions: pg-promise versions prior to 11.5.5 Description: The issue is related to SQL Injection due to improper handling of negative numbers. Recommendations: For versions prior to 11.5.5, update to version 11.5.5 or later to resolve the issue...

CVE-2025-29744: Improper Neutralization of Special Elements used in an SQL Command

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...