npm›ldapauth-fork›CVE-2015-72947.5 HIGHLDAP InjectionThe library is vulnerable to LDAP injection through the "username" parameter.