VYPR

Watermelondb

by Nozbe

Source repositories

CVEs (1)

  • CVE-2020-4035MedJun 3, 2020
    risk 0.31cvss 5.9epss 0.01

    In WatermelonDB (NPM package "@nozbe/watermelondb") before versions 0.15.1 and 0.16.2, a maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally causing…