SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via object key interpolation in SET clause expansion in text-encoder.js, query.js, and utils.js. When an object is passed as a query parameter with the permitSetMultiParamEntries option enabled, each key is expanded into a...