@sequelize/core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Critical 9.9

CVE-2023-22579

Sequalize - Unsafe fall-through in getWhereConditions

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.

Feathers-Sequalize Sequelize.js sequelize @sequelize/core npm

Feb 16, 2023
Critical 10.0

CVE-2023-22578

Sequalize - Default support for “raw attributes” when using parentheses

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

Feathers-Sequalize Sequelize.js sequelize @sequelize/core npm

Feb 16, 2023
Medium 5.3

CVE-2023-22580

Sequalize - Bad query filtering leading to SQL errors

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.

Feathers-Sequalize Sequelize.js sequelize @sequelize/core npm

Feb 16, 2023