CVE-2019-10749

2019-10-2916:06:05

snyk

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

57.0%

JSON

sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly sanitized in the Postgres dialect.

CNA Affected

[
  {
    "product": "sequelize",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 3.35.1"
      }
    ]
  }
]