GitHub Advisoryadvisory · npm

GHSA-hq8g-qq57-5275 SQL Injection in untitled-model

HIGH Published 2020-09-11 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
untitled-model
Severity
High
Weaknesses
CWE-89
Reviewed
2020-08-31

Affected packages

• npm untitled-model: all versions (no fix yet)

Description

All versions of `untitled-model` re vulnerable to SQL Injection. Query parameters are not properly sanitized allowing attackers to inject SQL statements and execute arbitrary SQL queries. Recommendation No fix is currently available. Consider using an alternative package until a fix is made available.

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References