p PatchFirst

CVE-2015-1369

CVE-2015-1369

This page contains facts from public vulnerability sources. Check the original advisory before updating.

SQL injection vulnerability in Sequelize before 2.0.0-rc7 for Node.js allows remote attackers to execute arbitrary SQL commands via the order parameter.

EPSS 2.1% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • sequelize npm

    Affected ranges
    • SEMVER: < 2.0.0-rc8

    Update to 2.0.0-rc8

Original sources

Check your server →