Skip to content
OpenAdvisories
Critical · 9.9 CVE-2023-22579 EUVD-2023-0801GHSA-vqfx-gj96-3w95

Sequalize - Unsafe fall-through in getWhereConditions

Published Feb 16, 2023 · Updated Apr 1, 2025 · Assigned by DIVD

Vendor: Feathers-Sequalize Product: Sequelize.js Package: @sequelize/core Package: sequelize Ecosystem: npm

Description

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.

Affected products

VendorProductAffectedFixed
Feathers-Sequalize Sequelize.js <v7.0.0-alpha.20 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm @sequelize/core < 7.0.0-alpha.20 7.0.0-alpha.20 GHSA-vqfx-gj96-3w95
npm sequelize < 6.28.1 6.28.1 GHSA-vqfx-gj96-3w95

References