There are a couple of ways around this but the best solution is to use a prepared query & pass the values in the payload instead of building a string query.
Look at the readme for the mySQL node - there is a section on preparing queries.
Lastly, you might want to read this...
"How To Work with JSON in MySQL | DigitalOcean" How To Work with JSON in MySQL | DigitalOcean