Skip to content

Vendor

query-mysql project vulnerabilities

1 published CVE affecting query-mysql project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of query-mysql project alerts

Products

Latest query-mysql project CVEs

Newest publication first

  1. CVE-2018-3754 SQL Injection in query-mysql

    Published
    HighCVSS 8.8 EPSS 1.2%

    Node.js third-party module query-mysql versions 0.0.0, 0.0.1, and 0.0.2 are vulnerable to an SQL injection vulnerability due to lack of user input sanitization. This may allow an attacker to run arbitrary SQL queries when fetching data from database.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.