github_osv/GHSA-hx5x-49mm-vmhw
SQL Injection in sails-mysql
Versions of `sails-mysql` prior to 0.10.8 are vulnerable to SQL Injection. The `sort` keyword is not properly sanitized and may allow attackers to inject SQL statements and execute arbitrary SQL queries
## Recommendation
Upgrade to version 0.10.8 or later.
gitlab/npm/sails-mysql/GMS-2020-492
SQL Injection in sails-mysql
Versions of `sails-mysql` are vulnerable to SQL Injection. The `sort` keyword is not properly sanitized and may allow attackers to inject SQL statements and execute arbitrary SQL queries