Skip to content
OpenAdvisories

Package · npm

@veramo/data-store

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    GHSA-38cw-85xc-xr9x

    Veramo is Vulnerable to SQL Injection in Veramo Data Store ORM

    ## Summary An SQL injection vulnerability exists in the `@veramo/data-store` package that allows any authenticated user to execute arbitrary SQL queries against the database. The vulnerability is caused by insufficient validation of the `column` parameter in …

    @veramo/data-store npm