SQL Injection in sequelize

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-10749 · ADVISORY
• sequelize/sequelize commit ee40173 · WEB
• snyk.io/vuln/SNYK-JS-SEQUELIZE-450222 · WEB
• npmjs.com/advisories/1017 · WEB

Lỗ hổng khác của sequelize

• CVE-2026-30951CAO 7.5Sequelize is a Node.js ORM tool. Prior to 6.37.8, there is SQL injection via unescaped cast type in JSON/JSONB where clause processing. The …
• CVE-2023-25813NGHIÊM TRỌNG 9.8Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are pa…
• CVE-2023-22580CAO 7.5Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.
• CVE-2023-22579CAO 8.8Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.
• CVE-2023-22578NGHIÊM TRỌNG 9.8Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.