Lucene search
K

4 matches found

vulnersOsv
vulnersOsv
added 2025/04/10 3:9 a.m.6 views

org.webjars.npm:class-validator (>=0.8.5 <=0.14.0), org.webjars.npm:image-thumbnail (=1.0.15) +8 more potentially affected by CVE-2025-56200 via org.webjars.npm:validator (>=10.11.0 <=9.2.0)

org.webjars.npm:validator MAVEN version =10.11.0, =0.8.5, =3.1.2, =3.18.2, =3.25.1 Source cves: CVE-2025-56200 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14102004...

6.1CVSS5.8AI score0.00309EPSS
Exploits1
OSV
OSV
added 2023/02/16 3:30 p.m.4 views

GHSA-8C25-F3MJ-V6H8 Sequelize information disclosure vulnerability

Due to improper input filtering in the sequelize js library, can malicious queries lead to sensitive information disclosure...

5.3CVSS5.9AI score0.00582EPSS
Exploits2References8
Github Security Blog
Github Security Blog
added 2023/02/16 3:30 p.m.31 views

Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elements

Duplicate advisory This advisory has been withdrawn because it is a duplicate of GHSA-f598-mfpv-gmfx. This link is maintained to preserve external references. Original Description Due to improper attribute filtering in the sequelize js library, an attacker can peform SQL injections. This issue ca...

10CVSS3AI score0.00831EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:0 a.m.6 views

The vulnerability of the sequelize.json() ORM library for applications like Sequelize allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sequelize.json ORM library for applications like Sequelize is related to the lack of protection for SQL query structures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

10CVSS7.9AI score0.01462EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder