Sequelize, all versions prior to version 4.44.3 and 5.15.1, is vulnerable to SQL Injection due to sequelize.json() helper function not escaping values properly when formatting sub paths for JSON queries for MySQL, MariaDB and SQLite.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: snyk
Published:
Updated: 2024-08-04T22:32:01.546Z
Reserved: 2019-04-03T00:00:00
Link: CVE-2019-10752

No data.

Status : Modified
Published: 2019-10-17T19:15:10.420
Modified: 2024-11-21T04:19:51.137
Link: CVE-2019-10752

No data.