Loading HuntDB...

GHSA-ff9h-848c-4xfj

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.

Related CVEs

Key Information

GHSA ID
GHSA-ff9h-848c-4xfj
Published
June 12, 2025 6:31 PM
Last Modified
June 17, 2025 9:32 PM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.