Skip to content
OpenAdvisories

Package · Debian

node-postgres

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Critical 9.8
    CVE-2017-16082 EPSS 10%

    Remote Code Execution in pg

    A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql whic…

    HackerOne pg node module node-postgres pg Debian Ubuntu npm