Knex (with MySQL) had a scary SQL injection | Hacker News Reader