Skip to content
OpenAdvisories

Package · npm

query-mysql

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2018-3754

    SQL Injection in query-mysql

    Node.js third-party module query-mysql versions 0.0.0, 0.0.1, and 0.0.2 are vulnerable to an SQL injection vulnerability due to lack of user input sanitization. This may allow an attacker to run arbitrary SQL queries when fetching data from database.

    query-mysql npm