Skip to content
OpenAdvisories

Package · npm

crud-query-parser

1 known vulnerabilities.

1 result · Feed

  • Critical 9.3

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in crud-query-parser

    The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if y…