Security vulnerability in node-sql

[bteng22]

Medium severity vulnerability found on sql@0.78.0 according to Snyk:
https://snyk.io/vuln/npm:sql:20180512

The report:
https://hackerone.com/reports/319465

[spion-h4]

If anyone is interested, we made a patch at https://github.com/TokyoFarmer/node-sql-2

It works with postgresql, but we've not tested if all other databases will behave correctly.

[danielmcq]

This is being reported when running npm audit now as well. They list it at https://nodesecurity.io/advisories/662.