Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.35 views

SQL Injection in sequelize

Affected versions of sequelize are vulnerable to SQL Injection in locations where user input is passed into the limit or order parameters of sequelize query calls, such as findOne or findAll. Recommendation Update to version 3.17.0 or later...

9.8CVSS3.8AI score0.01913EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2019/02/18 11:54 p.m.51 views

GHSA-98PQ-PMW9-4GPM SQL Injection in sequelize

Affected versions of sequelize are vulnerable to SQL Injection in locations where user input is passed into the limit or order parameters of sequelize query calls, such as findOne or findAll. Recommendation Update to version 3.17.0 or later...

9.8CVSS9.9AI score0.01913EPSS
SaveExploits0References4
Rows per page
Query Builder