Knexjs

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Knexjs records in CISA KEV

No Knexjs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2019-08022 CVE-2019-10757 · GHSA-58v4-qwx5-7f59

MEDIUM 44

knex.js versions before 0.19.5 are vulnerable to SQL Injection attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01159 Published 2019-10-08 Fixed in 0.19.5 CWE-89

TI-2016-09196 CVE-2016-20018 · GHSA-4jv9-3563-23j3

LOW 35

Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01117 Published 2022-12-19 Fixed in 2.4.0 CWE-89