system
Describe <CVE-2016-20018>.
user
What is <CVE-2016-20018>?
assistant
Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query..