Description
sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was pushed out that fixed potential SQL injection in sequelize 2.1.3 and earlier.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | sequelize node module | <= 2.1.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | sequelize | < 3.0.0 | 3.0.0 | GHSA-2v7q-2xqx-f4q5 |