Most recent entries from all

cnvd-2018-11292

EUVD-2026-164686

fkie_cve-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

GHSA-fvq6-55gv-jx9f — SQL Injection in mysql

Affected: npm: mysql

Versions of `mysql` prior to 2.0.0-alpha8 are affected by a SQL Injection vulnerability in the `mysql.escape()` function, which does not properly escape object keys.

## Recommendation

Update to version 2.0.0-alpha8 or later.

gsd-2015-9244

Withdrawn: UBUNTU-CVE-2015-9244

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: node-mysql

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.