Credentials Leak with Knex

• Knex

  95 18,789 7.9 JavaScript

  A query builder for PostgreSQL, MySQL, CockroachDB, SQL Server, SQLite3 and Oracle, designed to be flexible, portable, and fun to use.

  

This article will be focused on a security issue that I found in Knex and how to mitigate it, but I'll also talk briefly about the social aspects of this problem.

• patch-package

  65 9,988 6.3 TypeScript

  Fix broken node modules instantly 🏃🏽‍♀️💨

NPM doesn't have a patch command, but you can use patch-package to achieve the same result.

• SurveyJS

  surveyjs.io featured

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

• PostgreSQL

  57 11,937 8.0 JavaScript

  PostgreSQL client for node.js.

This was a known issue for pg developers, and they managed to fix it a long time ago (at the pg level), but the knowledge of this problem didn't reach Knex maintainers.

Suggest a related project