GMS-2020-492: SQL Injection in sails-mysql

September 3, 2020 (updated September 27, 2021)

Versions of sails-mysql are vulnerable to SQL Injection. The sort keyword is not properly sanitized and may allow attackers to inject SQL statements and execute arbitrary SQL queries

References

github.com/advisories/GHSA-hx5x-49mm-vmhw
github.com/balderdashy/sails/issues/6679
snyk.io/vuln/SNYK-JS-SAILSMYSQL-174916
www.npmjs.com/advisories/950

Code Behaviors & Features

Detect and mitigate GMS-2020-492 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →