ROOT-APP-NPM-CVE-2026-30951 CVE-2026-30951 in sequelize - Patched by Root

Root has patched CVE-2026-30951 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-25813 CVE-2023-25813 in sequelize - Patched by Root

Root has patched CVE-2023-25813 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-10748 CVE-2019-10748 in sequelize - Patched by Root

Root has patched CVE-2019-10748 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-10752 CVE-2019-10752 in sequelize - Patched by Root

Root has patched CVE-2019-10752 in the sequelize package for Root:npm. Multiple fixed versions available...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — NocoBase SQL Injection → PostgreSQL-superuser RCE SQL injection in the myInAppChannels:list action of NocoBase's @nocobase/plugin-notification-in-app-message ≤ 2.0.60. The filterlatestMsgReceiveTimestamp$lt request parameter is interpolated directly into a raw Sequelize.literal S...

CVE-2023-25813

CVE-2023-25813 CVE-2023-25813 Vulnerability Reproduction - SQL Injection in Sequelize...

CVE-2023-25813-TEST

CVE Test App An Express + MySQL practice app for locally verifying the behavior of Sequelize CVE-2023-25813. This project intentionally maintains a vulnerable Sequelize version and a vulnerable login query pattern. Do not expose it to the internet; run it only in a local Docker practice...

Sequelize-1day-CVE-2023-25813

CVE-2023-25813 CVE Information CVE Number : CVE-2023-25813 Description : In Sequelize versions prior to 6.19.1, input passed through the replacements option is not properly escaped, which can lead to SQL Injection depending on the query structure. Affected Versions : Sequelize 6.19.0 and below...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

CLEANSTART-2026-BS82547 Sequelize is a Node

Security vulnerability affects the sqlpad package. Sequelize is a Node...

CLSA-2026-1792476615 TuxCare security update for sequelize (1 CVE)

TuxCare rebuilt sequelize to address 1 CVE. Fixed in 6.37.7-tuxcare.1...

PT-2026-133375

TuxCare rebuilt sequelize to address 1 CVE. Fixed in 6.37.7-tuxcare.1...

Malicious code in link-sequelize-arcturus-nightwatch (npm)

Source: amazon-inspector 895c3a278459674c858fad560ca5887907f7f099f5fe2e7434039f732186e53c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-sequelize-pm2-sagitta (npm)

Source: amazon-inspector cf6c878fad16f3c94bc36a1465061235960e1dad3e2d0f0950c4459a35f53146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-acamar-sequelize-sass-loader (npm)

Source: amazon-inspector d953ff4007470886cb9390d415da40753ccb4bac042bf6d7663fead61bc4797d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview leda-acamar-sequelize-sass-loader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in karma-fornax-sequelize-ophiuchus (npm)

Source: amazon-inspector 665eee411bdf1ee3767b099ec85214a9d2342dd070d8f6b793e26e4c92f55e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in jsonp-ophiuchus-sequelize-miranda (npm)

Source: amazon-inspector b83722a8dd44906dafde5c5ea37d93ded30e736c4fcf990f55d367c46ac21943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in init-postcss-markdown-pdf-sequelize (npm)

Source: amazon-inspector abb21342977b56cd234645325128ec729005574ce297f5bbaf05e55b64a5fd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...