Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-22580 EUVD-2023-0664GHSA-8c25-f3mj-v6h8

Sequalize - Bad query filtering leading to SQL errors

Published Feb 16, 2023 · Updated Apr 1, 2025 · Assigned by DIVD

Vendor: Feathers-Sequalize Product: Sequelize.js Package: @sequelize/core Package: sequelize Ecosystem: npm

Description

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.

Affected products

VendorProductAffectedFixed
Feathers-Sequalize Sequelize.js <v7.0.0-alpha.20 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm @sequelize/core < 7.0.0-alpha.20 7.0.0-alpha.20 GHSA-8c25-f3mj-v6h8
npm sequelize < 6.28.1 6.28.1 GHSA-8c25-f3mj-v6h8

References