CVE-2015-9244

Description

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/felixge/node-mysql/issues/342 ↗
• https://nodesecurity.io/advisories/66 ↗