30 matches found
CVE-2026-19351: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/SelectQuery.build in the library lib/Select.js of the component Request Parameter Handler. Performing a manipulation results in sql injection. It is...
7.5CVSS6.7AI score0.00526EPSS
SaveExploits0References3
20