{"id":"CVE-2025-29744","aliases":["EUVD-2025-18190","GHSA-ff9h-848c-4xfj"],"status":"published","title":"pg-promise SQL Injection vulnerability","description":"pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0023,"percentile":0.13941,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2025-06-12T00:00:00Z","modified":"2026-06-17T09:05:37Z","fixes":[{"ecosystem":"npm","package":"pg-promise","fixed_in":["11.5.5"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"pg-promise","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.5.5"}]}]},{"source":"osv","ecosystem":"npm","package":"pg-promise","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"11.5.5"}]}]}],"products":[{"vendor":"vitaly-t","product":"pg-promise"}],"references":[{"url":"https://github.com/vitaly-t/pg-promise/discussions/911","tags":["Exploit","Issue Tracking","web"]},{"url":"https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29744","tags":["advisory"]},{"url":"https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw","tags":["web"]},{"url":"https://github.com/advisories/GHSA-ff9h-848c-4xfj"},{"url":"https://github.com/vitaly-t/pg-promise","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-29744","description":"pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.","status":"published","published":"2025-06-12T00:00:00Z","modified":"2025-06-17T19:11:12.905Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:45.797843Z"}],"euvd":[{"id":"EUVD-2025-18190","description":"pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.","status":"published","published":"2025-06-12T00:00:00Z","modified":"2025-06-17T19:11:12Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:22.334611Z"}],"ghsa":[{"id":"GHSA-ff9h-848c-4xfj","title":"pg-promise SQL Injection vulnerability","description":"pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.","status":"published","published":"2025-06-12T18:31:48Z","modified":"2025-06-18T19:41:43Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:38:47.835488Z"}],"nvd":[{"id":"CVE-2025-29744","description":"pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.","status":"published","published":"2025-06-12T16:15:22.727Z","modified":"2026-06-17T09:05:37.363Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:11.789448Z"}],"osv":[{"id":"GHSA-ff9h-848c-4xfj","title":"pg-promise SQL Injection vulnerability","description":"pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.","status":"published","published":"2025-06-12T18:31:48Z","modified":"2025-06-18T20:29:43.786084Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:46.39441Z"}]}}