Pg Promise
1 CVEs
product
Monthly
pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.
SQLi
Pg Promise
NVD
GitHub
CVSS 3.1
5.4
EPSS
0.0%
CVE-2025-29744
npm
EPSS 0%
CVSS 5.4
MEDIUM
POC
PATCH
This Month
pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.
SQLi
Pg Promise
NVD
GitHub