Lucene search
Veracode Vulnerability DatabaseVERACODE:20597HistoryJun 24, 2019 - 7:18 a.m.
SQL Injection
2019-06-2407:18:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.002
Percentile
57.0%
sequelize is vulnerable to sql injection attacks. The attacks are possible because the library does not escape the JSON path key provided by the user using postgres dialects in query-generator.js.
Related
osv
osv
CVE-2019-10749
2019-10-29 19:15:16
SQL Injection in sequelize
2019-11-08 17:05:17
prion
prion
Sql injection
2019-10-29 19:15:00
nvd
nvd
CVE-2019-10749
2019-10-29 19:15:16
cve
cve
CVE-2019-10749
2019-10-29 19:15:16
cvelist
cvelist
CVE-2019-10749
2019-10-29 16:06:05
nodejs
nodejs
SQL Injection
2019-06-24 14:59:17
github
github
SQL Injection in sequelize
2019-11-08 17:05:17