npm/@veramo/data-store: medium 6.8
Veramo is Vulnerable to SQL Injection in Veramo Data Store ORM
Action: Upgrade @veramo/data-store to 6.0.2 or later.
npm i @veramo/data-store@6.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.2 | - |
Fixed versions
| 6.0.2 |
Sources
- osv: GHSA-38cw-85xc-xr9x
- https://github.com/decentralized-identity/veramo/security/advisories/GHSA-38cw-85xc-xr9x
- https://github.com/decentralized-identity/veramo/pull/1482
- https://github.com/decentralized-identity/veramo/commit/067e39dd76f11ee2d25b99c8361d4f02a4223e3b
- https://github.com/decentralized-identity/veramo
- https://github.com/decentralized-identity/veramo/releases/tag/v6.0.2
published · modified · JSON