CVE-2016-1000225

Affected versions of "sequelize" are vulnerable to SQL Injection in Models that have fields with the "GEOMETRY" DataType. This vulnerability occurs because single quotes in document values are not escaped for GeoJSON documents using "STGeomFromGeoJSON", and MySQL GeoJSON documents using...

PT-2020-7933

Name of the Vulnerable Software and Affected Versions: sequelize versions prior to 3.23.6 Description: The issue affects models with fields of the GEOMETRY DataType, leading to SQL Injection. This occurs because single quotes in document values are not properly escaped for GeoJSON documents using...