SQL Fragment Injection in node-sql-query v0.1.25-0.1.28: Analysis and Fix

github.com 2026-08-09查看中文 →

Security AdvisoryHighdresende

Affected:

node-sql-query 0.1.25
node-sql-query 0.1.26
node-sql-query 0.1.27
node-sql-query 0.1.28

Referenced CVEs: CVE-2026-19351 · 7.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Goose CLI RCE via Git Core.fsmonitor in Review Command (CVE-2025-73718) 2026-08-11 Goose Git Command Injection Vulnerability Analysis and Fix Guide 2026-08-11 Zendesk Account ID Mass Assignment Fix Preventing Unauthorized Resource Transfer 2026-08-11 SSRF Bypass via IPv6 Transition Addresses Embedding Private IPv4 in Webhook Validator 2026-08-10 Fix for Info Disclosure due to Broken Access Control in get_history_details 2026-08-10

Offline Archive

Offline screenshot & PDF are Pro-exclusive