3 matches found
SQL Injection
connect-pg-simple is vulnerable to SQL injection. SQL queries with schemaName or tableName are not sanitized, allowing an attacker to inject and execute malicious SQL...
Sql injection
connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data...
CVE-2019-15658
connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data...