CVE-2016-10556
1 advisory.
npm/sequelize CVE-2016-10556: high 7.5, EPSS 1.32%
SQL Injection in sequelize
Action: Upgrade sequelize to 3.20.0 or later.
npm i sequelize@3.20.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.20.0 | - |
Fixed versions
| 3.20.0 |
Sources
- osv: GHSA-9c2p-jw8p-f84v
- https://nvd.nist.gov/vuln/detail/CVE-2016-10556
- https://github.com/sequelize/sequelize/issues/5671
- https://github.com/sequelize/sequelize/commit/23952a2b020cc3571f090e67dae7feb084e1be71
- https://github.com/sequelize/sequelize/commits/v3.20.0?after=62e4dacb28a779a190a3e042b971dcd8c7926e49+34&branch=v3.20.0&qualified_name=refs%2Ftags%2Fv3.20.0
CVE-2016-10556 · published · modified · JSON