Skip to content
OpenAdvisories

Package · npm

sequelize

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-22580

    Sequalize - Bad query filtering leading to SQL errors

    Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.

    Feathers-Sequalize Sequelize.js sequelize @sequelize/core npm
  • Medium —
    GHSA-fw4p-36j9-rrj3

    Denial of Service in sequelize

    Versions of `sequelize` prior to 4.44.4 are vulnerable to Denial of Service (DoS). The SQLite dialect fails to catch a `TypeError` exception for the `results` variable. The `results` value may be undefined and trigger the error on a `.map` call. This may allo…

    sequelize npm
  • Medium —
    CVE-2016-10554

    SQL Injection in sequelize

    sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, ev…

    HackerOne sequelize node module sequelize npm