loopback-connector-mssql is Loopback Microsoft SQL Server Connector.
Affected versions of the package are vulnerable to SQL injection attacks. User-supplied inputs are not properly sanitized before using it in SQL queries. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.
loopback-connector-mssql to version 1.3.0 or higher.
- Raymond Feng
- Snyk ID
- 07 Jan, 2015
- 04 Jan, 2017