Skip to content
OpenAdvisories

Product · loopbackio

loopback-connector-postgresql

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2022-35942

    loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter

    Improper input validation on the `contains` LoopBack filter may allow for arbitrary SQL injection. When the extended filter property `contains` is permitted to be interpreted by the Postgres connector, it is possible to inject arbitrary SQL which may affect t…

    loopbackio loopback-connector-postgresql loopback-connector-postgresql npm