mediumhigh confidenceCWE-400denial of serviceOpen· stale
PostgreSQL pool lacks statement/connection timeouts, enabling unauthenticated pool-exhaustion DoS via SQL injection
server.js:4
No write-up in this demo
The demo export carries full write-ups only for the SQL injection and the express advisory. This finding shows what the scan stored: title, location and severity.