npm/@saltcorn/data: unknown 0
@saltcorn/data vulnerable to SQL Injection via jsexprToSQL Literal Handler
Action: Upgrade @saltcorn/data to 1.4.5 or later.
npm i @saltcorn/data@1.4.5npm i @saltcorn/data@1.5.5npm i @saltcorn/data@1.6.0-beta.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.5 | - |
| 1.5.0 | 1.5.5 | - |
| 1.6.0-alpha.0 | 1.6.0-beta.4 | - |
Fixed versions
| 1.4.5 | 1.5.5 | 1.6.0-beta.4 |
Sources
- osv: GHSA-59xv-588h-2vmm
- https://github.com/saltcorn/saltcorn/security/advisories/GHSA-59xv-588h-2vmm
- https://github.com/saltcorn/saltcorn
published · modified · JSON