GHSA-cgpp-wm2h-6hqxHigh

SQL Injection in waterline-sequel

Published
February 18, 2019
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2016-10551 →

📋 Description

Affected versions of waterline-sequel are vulnerable to SQL injection in cases where user input is passed into the like, contains, startsWith, or endsWith methods.

Recommendation

Upgrade to at least version 0.5.1

🎯 Affected products1

  • npm/waterline-sequel:< 0.5.1

🔗 References (5)