Knexjs Knex
2 CVEs affecting Knexjs Knex. Latest disclosed: 2022-12-19. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10757 | Critical | 9.8 | 2019-10-08 | knex.js versions before 0.19.5 are vulnerable to SQL Injection attack. Identifiers are escaped incorrectly as part of the MSSQL dialect, allowing attackers to… |
CVE-2016-20018 | High | 7.5 | 2022-12-19 | Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query. |