Description
Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query.
Remediation
References
https://github.com/knex/knex/issues/1227
https://nvd.nist.gov/vuln/detail/CVE-2016-20018
https://www.ghostccamm.com/blog/knex_sqli/
Related Vulnerabilities
CVE-2021-32828 Vulnerability in maven package org.nuxeo.ecm.platform:nuxeo-platform-oauth
CVE-2022-31053 Vulnerability in maven package com.clever-cloud:biscuit-java
CVE-2016-7103 Vulnerability in maven package org.fujion.webjars:jquery-ui
CVE-2019-10782 Vulnerability in maven package com.puppycrawl.tools:checkstyle
CVE-2023-36820 Vulnerability in maven package io.micronaut.security:micronaut-security-oauth2