CVE-2016-1000225

Affected versions of "sequelize" are vulnerable to SQL Injection in Models that have fields with the "GEOMETRY" DataType. This vulnerability occurs because single quotes in document values are not escaped for GeoJSON documents using "STGeomFromGeoJSON", and MySQL GeoJSON documents using...