Unknown · Logrocket-Oauth2-Example · CVE-2022-38488
**Name of the Vulnerable Software and Affected Versions**
logrocket-oauth2-example versions prior to 2020-05-27
**Description**
The issue allows SQL injection via the `/auth/register` API endpoint, specifically through the `username` parameter.
**Recommendations**
For versions prior to 2020-05-27, as a temporary workaround, consider restricting access to the `/auth/register` API endpoint or sanitizing the `username` parameter to prevent SQL injection until a patch is available.