Lucene search
+L

2 matches found

OSV
OSV
added 2019/02/18 11:54 p.m.46 views

GHSA-98PQ-PMW9-4GPM SQL Injection in sequelize

Affected versions of sequelize are vulnerable to SQL Injection in locations where user input is passed into the limit or order parameters of sequelize query calls, such as findOne or findAll. Recommendation Update to version 3.17.0 or later...

9.8CVSS9.9AI score0.01913EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2019/02/18 11:54 p.m.33 views

SQL Injection in sequelize

Affected versions of sequelize are vulnerable to SQL Injection in locations where user input is passed into the limit or order parameters of sequelize query calls, such as findOne or findAll. Recommendation Update to version 3.17.0 or later...

9.8CVSS3.8AI score0.01913EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder