CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

CVE-2023-25813

CVE-2023-25813 CVE-2023-25813 Vulnerability Reproduction - SQL Injection in Sequelize...

Sequelize-1day-CVE-2023-25813

CVE-2023-25813 CVE Information CVE Number : CVE-2023-25813 Description : In Sequelize versions prior to 6.19.1, input passed through the replacements option is not properly escaped, which can lead to SQL Injection depending on the query structure. Affected Versions : Sequelize 6.19.0 and below...

CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — NocoBase SQL Injection → PostgreSQL-superuser RCE SQL injection in the myInAppChannels:list action of NocoBase's @nocobase/plugin-notification-in-app-message ≤ 2.0.60. The filterlatestMsgReceiveTimestamp$lt request parameter is interpolated directly into a raw Sequelize.literal S...

CVE-2023-25813-TEST

CVE Test App An Express + MySQL practice app for locally verifying the behavior of Sequelize CVE-2023-25813. This project intentionally maintains a vulnerable Sequelize version and a vulnerable login query pattern. Do not expose it to the internet; run it only in a local Docker practice...

CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

ROOT-APP-NPM-CVE-2026-69240 CVE-2026-69240 in sequelize - Patched by Root

Root has patched CVE-2026-69240 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-22578 CVE-2023-22578 in sequelize - Patched by Root

Root has patched CVE-2023-22578 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-25813 CVE-2023-25813 in sequelize - Patched by Root

Root has patched CVE-2023-25813 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2023-22579 CVE-2023-22579 in sequelize - Patched by Root

Root has patched CVE-2023-22579 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-8MWQ-MJ73-QV68 GHSA-8mwq-mj73-qv68 in sequelize - Patched by Root

Root has patched GHSA-8mwq-mj73-qv68 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-30951 CVE-2026-30951 in sequelize - Patched by Root

Root has patched CVE-2026-30951 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-10752 CVE-2019-10752 in sequelize - Patched by Root

Root has patched CVE-2019-10752 in the sequelize package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2019-10748 CVE-2019-10748 in sequelize - Patched by Root

Root has patched CVE-2019-10748 in the sequelize package for Root:npm. Multiple fixed versions available...

CLEANSTART-2026-BS82547 Sequelize is a Node

Security vulnerability affects the sqlpad package. Sequelize is a Node...

CLSA-2026-1792476615 TuxCare security update for sequelize (1 CVE)

TuxCare rebuilt sequelize to address 1 CVE. Fixed in 6.37.7-tuxcare.1...

PT-2026-133375

TuxCare rebuilt sequelize to address 1 CVE. Fixed in 6.37.7-tuxcare.1...

Malicious code in link-sequelize-arcturus-nightwatch (npm)

Source: amazon-inspector 895c3a278459674c858fad560ca5887907f7f099f5fe2e7434039f732186e53c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-sequelize-pm2-sagitta (npm)

Source: amazon-inspector cf6c878fad16f3c94bc36a1465061235960e1dad3e2d0f0950c4459a35f53146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-acamar-sequelize-sass-loader (npm)

Source: amazon-inspector d953ff4007470886cb9390d415da40753ccb4bac042bf6d7663fead61bc4797d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...