CVE-2025-29744 PUBLISHED

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.

• https://github.com/vitaly-t/pg-promise/discussions/911
• https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/

• n/a text