critical9.8
CVE-2015-9244
Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.
Impact
Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mysqljs | Mysql | through 0.9.6 Version 2.0.0 |