Product · Feathers-Sequalize

Sequelize.js

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.9

CVE-2023-22579

Sequalize - Unsafe fall-through in getWhereConditions

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.

Feathers-Sequalize Sequelize.js sequelize @sequelize/core npm

Feb 16, 2023
Critical 10.0

CVE-2023-22578

Sequalize - Default support for “raw attributes” when using parentheses

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

Feathers-Sequalize Sequelize.js sequelize @sequelize/core npm

Feb 16, 2023