CVE-2023-22578
CVE-2023-22578 · Sequalize - Default support for “raw attributes” when using parentheses
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.
CVSS 10.0 · Critical · EPSS 0.8% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
sequelize.js
- Versions
- <v7.0.0-alpha.20: Affected
No fix published
@sequelize/core npm
- Affected ranges
- SEMVER: < 7.0.0-alpha.20
Update to 7.0.0-alpha.20
sequelize npm
- Affected ranges
- SEMVER: < 6.29.0
Update to 6.29.0