Skip to content
OpenAdvisories

Package · npm

squel

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-4qhx-g9wp-g9m6

    Failure to sanitize quotes which can lead to sql injection in squel

    All versions of `squel` are vulnerable to sql injection. The `squel` package does not properly escape user provided input when provided using the `setFields` method. This could lead to sql injection if the query was then executed. Proof of concept demonstrati…

    squel npm