2025-06-12 00:00:00
mitre
PUBLISHED
pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.