A batteries-included SQL query & schema builder for PostgresSQL, MySQL, CockroachDB, MSSQL and SQLite3
73%
Total Score
72
100
100
45
50
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10469 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. knex is vulnerable to SQL Injection in versions 0.0.1 - 3.2.8. | 0.0.1 - 3.2.8 | High |
CVE-2016-20018 knex is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 2.4.0. | 0.0.0 - 2.4.0 | High |
CVE-2019-10757 knex is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 0.19.5. | 0.0.0 - 0.19.5 | Critical |
| Dependency | Last Release | Score |
|---|---|---|
esm Version ^3.2.25 | — | — |
tarn Version ^3.0.2 | — | — |
debug Version 4.3.4 | — | — |
lodash Version ^4.17.21 | — | — |
getopts Version 2.3.0 | — | — |
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant