Product
JSON-SCADA before 0.65-alpha contains an SQL injection vulnerability in the opcApi() function within src/server_realtime_auth/index.js.