| Package | Affected versions | Patched versions |
|---|---|---|
| sequelize | < 4.12.0 | 4.12.0 |
Versions of sequelize prior to 4.12.0 are vulnerable to NoSQL Injection. Query operators such as $gt are not properly sanitized and may allow an attacker to alter data queries, leading to NoSQL Injection.
Upgrade to version 4.12.0 or later
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free