@sap/hana-client@2.20.23 vulnerabilities

Official SAP HANA Node.js Driver

latest version

2.22.32
latest non vulnerable version

2.22.32
first published

5 years ago
latest version published

16 days ago
licenses detected
- Unknown
  >=0
View @sap/hana-client package health on Snyk Advisor Open this link in a new tab

Known vulnerabilities in the @sap/hana-client package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Prototype Pollution @sap/hana-client is an Official SAP HANA Node.js Driver Affected versions of this package are vulnerable to Prototype Pollution due to improper user input sanitization involving `nestTables`. A user can disrupt service by polluting the prototype of this object. How to fix Prototype Pollution? Upgrade `@sap/hana-client` to version 2.21.31 or higher.	<2.21.31