2019-08-26 22:55:00
mitre
PUBLISHED
connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data.