Description
connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | connect-pg-simple | < 6.0.1 | 6.0.1 | GHSA-xqh8-5j36-4556 |
High · 7.3
CVE-2019-15658
EUVD-2019-0645GHSA-xqh8-5j36-4556
SQL Injection in connect-pg-simple
Published Aug 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre