475 matches found
PT-2026-24433
Name of the Vulnerable Software and Affected Versions Sequelize versions prior to 6.37.8 Description Sequelize, a Node.js ORM tool, contains a SQL injection flaw due to unescaped cast type handling within JSON/JSONB where clause processing. The traverseJSON function splits JSON path keys using ':...
Sequelize SQL注入漏洞
Sequelize is an open-source database ORM Object-Relational Mapping tool for Node.js. Versions of Sequelize prior to 6.37.8 had a SQL injection vulnerability. This vulnerability stemmed from type conversion that wasn’t properly escaped during the handling of JSON/JSONB WHERE clauses, which could...
CVE-2019-11069
Sequelize version 5 before 5.3.0 does not properly ensure that standard conforming strings are used...
CVE-2023-25813
Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...
EUVD-2025-177455
Malicious code in on-planckscale-sequelize-comet npm...
EUVD-2025-175463
Malicious code in xo-sequelize-thermochronology-resonance npm...
MAL-2025-187219 Malicious code in gravity-wezen-sequelize-fermion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e705d37886617b79af3e4139947f47eb9b4a67b7b11b7b5fe989694e66d8e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179230
Malicious code in dynamo-ganymede-init-sequelize npm...
EUVD-2025-177872
Malicious code in metalsmith-xanthus-react-bootstrap-sequelize npm...
EUVD-2025-179273
Malicious code in dorado-norma-sequelize-hydrogeology npm...
EUVD-2025-178437
Malicious code in impulse-holography-grunt-sequelize npm...
EUVD-2025-175905
Malicious code in transform-version-sequelize-native npm...
Malicious code in stream-sequelize-writable-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdf4cd8fedeb6040c6b2bae5b893aedc5f019fba5512dc35e0ebc2a03cc4b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176432
Malicious code in sequelize-eris-europa-sails npm...
EUVD-2025-179291
Malicious code in docusaurus-buffer-sequelize-cassini npm...
EUVD-2025-176430
Malicious code in sequelize-ophiuchus-parcel-procyon npm...
EUVD-2025-175592
Malicious code in webdriverio-umbriel-sequelize-version npm...
EUVD-2025-176433
Malicious code in sequelize-configstore-neuromorphic-petrology npm...
MAL-2025-187880 Malicious code in luna-sequelize-markdown-pdf-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e816ece07571d3eee4e7cb9bac7ec4cbac325b184558f6366f6bea764c321333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...