Skip to content
OpenAdvisories

Vendor

sequelize

3 known vulnerabilities.

Products

sequelize 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2023-25813 Public exploit

    SQL Injection via replacements in sequelize

    Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific …

    sequelize sequelize sequelize npm