CVE-2025-29744

Published June 12th, 2025

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.

vitaly-t/pg-promise

PostgreSQL interface for Node.js

GitHub

3.55K