knex@0.14.2 vulnerabilities

A batteries-included SQL query & schema builder for PostgresSQL, MySQL, CockroachDB, MSSQL and SQLite3

Known vulnerabilities in the knex package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H SQL Injection knex is a query builder for PostgreSQL, MySQL and SQLite3 Affected versions of this package are vulnerable to SQL Injection due to missing escape of field objects, which allows ignoring the `WHERE` clause of a `SQL` query. Note: Exploiting this vulnerability is possible when using `MySQL` DB. How to fix SQL Injection? Upgrade `knex` to version 2.4.0 or higher.	<2.4.0
C SQL Injection knex is a query builder for PostgreSQL, MySQL and SQLite3 Affected versions of this package are vulnerable to SQL Injection. None How to fix SQL Injection? Upgrade `knex` to version 0.19.5 or higher.	<0.19.5