description: Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.
problem types: SQL Injection (CWE-89)
affected:
{
product: mysql node module
vendor: HackerOne
versions:
status: affected, version: <=v2.0.0-alpha7
}