Findings
Exploitable issues, each with a traced path from an entry point an attacker can reach to the vulnerable code.
- criticalSQL injection in GET /users: unsanitized req.query.email interpolated into SQL and run via simple query protocol not re-seen
- highUnauthenticated PII disclosure: GET /users returns user IDs and emails without any auth not re-seen
- highexpress@4.19.2 ships a known vulnerability (GHSA-qw6h-vgh9-j6wx)
- mediumPostgreSQL pool lacks statement/connection timeouts, enabling unauthenticated pool-exhaustion DoS via SQL injection not re-seen
4 findings