CVE-2019-10752
1 advisory.
npm/sequelize CVE-2019-10752: critical 9.8, EPSS 1.46%
SQL Injection in sequelize
Action: Upgrade sequelize to 4.44.3 or later.
npm i sequelize@4.44.3npm i sequelize@5.15.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.44.3 | - |
| 5.0.0 | 5.15.1 | - |
Fixed versions
| 4.44.3 | 5.15.1 |
Sources
- osv: GHSA-m9jw-237r-gvfv
- https://nvd.nist.gov/vuln/detail/CVE-2019-10752
- https://github.com/sequelize/sequelize/pull/11329
- https://github.com/sequelize/sequelize/commit/9bd0bc1,
- https://github.com/sequelize/sequelize/commit/9bd0bc111b6f502223edf7e902680f7cc2ed541e
- https://snyk.io/vuln/SNYK-JS-SEQUELIZE-459751
- https://snyk.io/vuln/SNYK-JS-SEQUELIZE-459751,
- https://www.npmjs.com/advisories/1146
CVE-2019-10752 · published · modified · JSON