2 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-69240
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in...
9.8CVSS8.6AI score0.0032EPSS
SaveExploits0References2
CVE-2026-69240
Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-string.js does not escape quotes if the value starts with TOTIMESTAMP or TODATE. In the Oracle dialect, when val is a string and starts wit...
9.8CVSS0.0032EPSS
SaveExploits0References3
20