Skip to content
OpenAdvisories

Product · HackerOne

sequelize node module

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High —
    CVE-2016-10550

    SQL Injection in sequelize

    sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS If user input goes into the `limit` or `order` parameters, a malicious user can put in their…

    HackerOne sequelize node module sequelize npm
  • High —
    CVE-2016-10553

    Potential SQL Injection in sequelize

    sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was pushed out that fixed potential SQL injection in sequelize 2.1.3 and earlier.

    HackerOne sequelize node module sequelize npm
  • High 7.5
    CVE-2016-10556

    SQL Injection in sequelize

    sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS In Postgres, SQLite, and Microsoft SQL Server there is an issue where arrays are treated as …

    HackerOne sequelize node module sequelize npm