connect-pg-simple is vulnerable to SQL injection. SQL queries with schemaName or tableName are not sanitized, allowing an attacker to inject and execute malicious SQL...
7.3CVSS3.4AI score0.00981EPSS
SaveExploits0References3Affected Software1
Prion•added 2019/08/26 11:15 p.m.•15 views
Sql injection
connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data...
7.5CVSS7.5AI score0.00981EPSS
SaveExploits0References1Affected Software1
Cvelist•added 2019/08/26 10:55 p.m.•18 views
CVE-2019-15658
connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data...