CVE-2015-9244

Description

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

Affected packages (2)

• Debian/node-mysqlfrom 0, < 2.0.0~alpha8-1
• npm/mysqlfrom 0, < 2.0.0-alpha8

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2015-9244
• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2015-9244
• WEBhttps://github.com/felixge/node-mysql/issues/342
• WEBhttps://www.npmjs.com/advisories/66