CVE-2026-69240

npm/sequelize CVE-2026-69240: critical 9.8, EPSS 0.54%

Sequelize: SQL Injection (Oracle DB)

Action: Upgrade sequelize to 6.37.4 or later.

npm i sequelize@6.37.4

Affected

Fixed versions

Sources

• osv: GHSA-v8fg-2rw7-q452
• https://github.com/sequelize/sequelize/security/advisories/GHSA-v8fg-2rw7-q452
• https://github.com/sequelize/sequelize/commit/5deadd2410ae9136a21fb652db206d27bb715f26
• https://github.com/sequelize/sequelize
• https://github.com/sequelize/sequelize/releases/tag/v6.37.4

CVE-2026-69240 · published 2026-08-03T20:29:50Z · modified 2026-08-03T20:56:43.986253Z · JSON