| Package | Affected versions | Patched versions |
|---|---|---|
| knex | < 0.19.5 | 0.19.5 |
| knex | < 0.19.5 | 0.19.5 |
knex.js versions before 0.19.5 are vulnerable to SQL Injection attack. Identifiers are escaped incorrectly as part of the MSSQL dialect, allowing attackers to craft a malicious query to the host DB.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free