4 matches found
CVE-2023-6293
Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6...
@5minds/processcube_engine (>=15.0.0, <=17.0.0-renovate-fffeda-lowoukm9), @andresmeidla/crud-sequelize (>=5.0.0-alpha.3, <=5.0.1-alpha-7) +75 more potentially affected by CVE-2023-6293 via sequelize-typescript (>=2.0.0, <=2.1.5)
sequelize-typescript NPM version =2.0.0, =15.0.0, =5.0.0-alpha.3, =13.0.7-feature-244b53-kvkvw2nk, =0.1.3-alpha.0, =0.1.19-alpha.0, =0.1.11-alpha.0, =0.1.2, =0.1.3, =0.1.9, =0.4.3, =0.1.7, =0.1.3, =0.1.0, =3.10.6, =3.10.10 and more Source cves: CVE-2023-6293 Source advisory: OSV:GHSA-7PVX-4585-HQ...
CVE-2023-6293
CVE-2023-6293 affects the sequelize-typescript project owned by robinbuschmann. The issue is a Prototype Pollution vulnerability in the repository prior to version 2.1.6, arising from unsafe handling in object property assignment (deepAssign as cited by Veracode) that can allow modification of th...
