GHSA-crpm-fm48-chj7: 
JavaScript vulnerability analysis and mitigation

A high-severity SQL Injection vulnerability was identified in the resquel npm package (GHSA-crpm-fm48-chj7). The vulnerability was discovered and reviewed on August 31, 2020, published to the GitHub Advisory Database on September 11, 2020, and last updated on January 9, 2023. The vulnerability affects all versions of the resquel package (GitHub Advisory).

The vulnerability is classified as CWE-89 (SQL Injection) with a high severity rating. The core issue lies in the improper sanitization of query parameters, which allows attackers to inject and execute arbitrary SQL statements. No CVE ID has been assigned to this vulnerability (GitHub Advisory).

The vulnerability enables attackers to inject and execute arbitrary SQL queries through unsanitized query parameters, potentially leading to unauthorized database access, data manipulation, or exposure of sensitive information (GitHub Advisory).

The vulnerability affects all versions of the resquel package (>= 0), and there are no patched versions available. The widespread nature of the vulnerability across all package versions increases its exploitability risk (GitHub Advisory).

Currently, no fix is available for this vulnerability. The recommended mitigation strategy is to consider using an alternative package until a security fix is made available (GitHub Advisory).