GitHub Advisoryadvisory · npm

GHSA-crpm-fm48-chj7 SQL Injection in resquel

HIGH Published 2020-09-11 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
resquel
Severity
High
Weaknesses
CWE-89
Reviewed
2020-08-31

Affected packages

• npm resquel: all versions (no fix yet)

Description

All versions of `resquel` are vulnerable to SQL Injection. Query parameters are not properly sanitized, allowing attackers to inject SQL statements and execute arbitrary SQL queries Recommendation No fix is currently available. Consider using an alternative package until a fix is made available.

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References