CVE-2016-10553
CVE-2016-10553
This page contains facts from public vulnerability sources. Check the original advisory before updating.
sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was pushed out that fixed potential SQL injection in sequelize 2.1.3 and earlier.
EPSS 1.3% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
sequelize node module
- Versions
- <= 2.1.3: Affected
No fix published
sequelize npm
- Affected ranges
- SEMVER: < 3.0.0
Update to 3.0.0