CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

CVE-2025-29744

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers...

CVE-2025-29744

The pg-promise library (NPM) versions prior to 11.5.5 are vulnerable to SQL Injection due to the improper handling of negative numbers. This flaw allows an attacker to manipulate SQL queries by injecting malicious input. Several packages, including parse-server , class-controller , and @evdhiggin...