Node-postgres

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Node-postgres records in CISA KEV

No Node-postgres vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Pg · all components

TI-2017-11803 CVE-2017-16082 · GHSA-wc9v-mj63-m9g5

MEDIUM 55

A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.1045 Published 2018-06-07 Fixed in 2.11.2, 3.6.4 +9 CWE-94