GMS-2016-77: SQL Injection via like, contains, startsWith, endsWith

Any user input that goes into Waterline’s like, contains, startsWith, or endsWith will end up in waterline-sequel with the potential for malicious code. A malicious user can input their own SQL statements that will get executed and have full access to the database.