accounts (>=0.0.1, <=0.0.5), baleina.js (>=0.0.1, <=0.0.9) +109 more potentially affected by CVE-2016-10553 via sequelize (>=2.0.0-alpha2, <=2.1.3)

sequelize NPM version =2.0.0-alpha2, =0.0.1, =0.0.1, =0.0.5, =0.0.1, =0.0.1, =0.0.1, =0.0.2-a, =0.0.1-alpha1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.6, =1.0.4 and more Source cves: CVE-2016-10553 Source advisory: GHSA-2V7Q-2XQX-F4Q5...

CVE-2016-10553

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was pushed out that fixed potential SQL injection in sequelize 2.1.3 and earlier...

CVE-2016-10553

CVE-2016-10553 affects the Node.js ORM sequelize . The vulnerability is a SQL Injection when user input is concatenated into queries, specifically in patterns like findOne or where: "user input". Affected versions are the pre-3.0 releases; the recommended fix is to upgrade to version 3.0.0 or lat...

CVE-2016-10553

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was pushed out that fixed potential SQL injection in sequelize 2.1.3 and earlier...