CVE-2026-64657

Budibase is an open-source low-code platform affected by three SQL injection vulnerabilities in its PostgreSQL , Microsoft SQL Server , and MySQL database connectors (prior to 3.39.19). The root cause is that user-controlled schema and table configuration fields are interpolated directly into raw...

CVE-2022-35942

Improper input validation on the contains LoopBack filter may allow for arbitrary SQL injection. When the extended filter property contains is permitted to be interpreted by the Postgres connector, it is possible to inject arbitrary SQL which may affect the confidentiality and integrity of data...

Sql injection

Improper input validation on the contains LoopBack filter may allow for arbitrary SQL injection. When the extended filter property contains is permitted to be interpreted by the Postgres connector, it is possible to inject arbitrary SQL which may affect the confidentiality and integrity of data...

CVE-2022-35942 loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter

Improper input validation on the contains LoopBack filter may allow for arbitrary SQL injection. When the extended filter property contains is permitted to be interpreted by the Postgres connector, it is possible to inject arbitrary SQL which may affect the confidentiality and integrity of data...

CVE-2022-35942

Improper input validation on the "contains" LoopBack filter may allow for arbitrary SQL injection. When the extended filter property "contains" is permitted to be interpreted by the Postgres connector, it is possible to inject arbitrary SQL which may affect the confidentiality and integrity of da...

CVE-2022-35942 loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter

Improper input validation on the contains LoopBack filter may allow for arbitrary SQL injection. When the extended filter property contains is permitted to be interpreted by the Postgres connector, it is possible to inject arbitrary SQL which may affect the confidentiality and integrity of data...

CVE-2022-35942

The CVE-2022-35942 issue affects loopback-connector-postgresql (LoopBack) where improper input validation of the contains filter allows SQL injection when interpreted by the PostgreSQL connector. A patch was released in loopback-connector-postgresql v5.5.1 to fix this. Impacts include cases where...

CVE-2022-35942: Improper Neutralization of Special Elements used in an SQL Command

Improper input validation on the contains LoopBack filter may allow for arbitrary SQL injection. When the extended filter property contains is permitted to be interpreted by the Postgres connector, it is possible to inject arbitrary SQL which may affect the confidentiality and integrity of data...

GHSA-J259-6C58-9M58 loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter

Improper input validation on the contains LoopBack filter may allow for arbitrary SQL injection. Impact When the extended filter property contains is permitted to be interpreted by the Postgres connector, it is possible to inject arbitrary SQL which may affect the confidentiality and integrity of...

it.agilelab:darwin-postgres-connector_2.10 (>=1.0.2, <=1.2.2), it.agilelab:darwin-postgres-connector_2.11 (>=1.0.2, <=1.2.2) +6 more potentially affected by CVE-2022-31197 via org.postgresql:postgresql (9.3-1100-jdbc4)

org.postgresql:postgresql MAVEN version 9.3-1100-jdbc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.postgresql:postgresql and may be impacted: - it.agilelab:darwin-postgres-connector2.10 =1.0.2, =1.0.2, =1.0.2, =1.0.12, =1.0.7, =1.0.7, =3.2.0,...