Sql Injection

[ayanhasnain03]

Risk: The function directly interpolates user input (name, email, clerkId) into the SQL query, which may leave it vulnerable to SQL injection attacks.

[shadowedj33]

@ayanhasnain03

Update the node module

"node_modules/@expo/cli":

find and change "dependencies":
{
"send": "^0.19.0",
}

then run npm install, will solve the vulnerabilities.

[ayanhasnain03]

@shadowedj33 i cant create this project i just check repo and i see sql injection prevention not implemnt

[pitops]

Don't do the suggestion @shadowedj33 is suggesting.

[shadowedj33]

@pitops what issue does this resolution cause? What should I do to fix this instead? Forums and expo discussions suggested this, as well as the package's information page.

What did you do to resolve the issue?