481 matches found
Malicious code in farout-stream-loglevel-sequelize (npm)
The package farout-stream-loglevel-sequelize was found to contain malicious code...
Malicious code in taurus-vulcan-paleoecology-sequelize (npm)
The package taurus-vulcan-paleoecology-sequelize was found to contain malicious code...
Malicious code in tectonic-ursa-sequelize-spawn (npm)
The package tectonic-ursa-sequelize-spawn was found to contain malicious code...
Malicious code in futurology-babel-ionosphere-sequelize (npm)
The package futurology-babel-ionosphere-sequelize was found to contain malicious code...
MAL-2025-34644 Malicious code in tectonic-ursa-sequelize-spawn (npm)
The package tectonic-ursa-sequelize-spawn was found to contain malicious code...
MAL-2025-32958 Malicious code in sequelize-models-version-history (npm)
The package sequelize-models-version-history was found to contain malicious code...
MAL-2025-21133 Malicious code in galaxy-sequelize-nebula-gravity (npm)
The package galaxy-sequelize-nebula-gravity was found to contain malicious code...
MAL-2025-37706 Malicious code in umbriel-sequelize-tool-browserify (npm)
The package umbriel-sequelize-tool-browserify was found to contain malicious code...
MAL-2025-32959 Malicious code in sequelize-schema-file-generator (npm)
The package sequelize-schema-file-generator was found to contain malicious code...
CVE-2023-22579
Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...
CVE-2023-22578
Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections...
CVE-2023-6293
Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6...
CVE-2019-10748
Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnerable to SQL Injection due to JSON path keys not being properly escaped for the MySQL/MariaDB dialects...
CVE-2019-10752
Sequelize, all versions prior to version 4.44.3 and 5.15.1, is vulnerable to SQL Injection due to sequelize.json helper function not escaping values properly when formatting sub paths for JSON queries for MySQL, MariaDB and SQLite...
CVE-2019-10749
sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly sanitized in the Postgres dialect...
Sequelize Configuration File Detected
Sequelize is a promise-based Node.js ORM tool for databases engines. Sequelize CLI uses by default a configuration file in 'config' directory to store the environment and database information. By accessing it, an attacker could leverage the vulnerability to gain unauthorized and privileged access...
MAL-2024-3002 Malicious code in sequelize-orm (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sequelize-orm (npm)
--- -= Per source details. Do not edit below this line.=-...