{"action":"Upgrade sequelize to 5.3.0 or later.","affected":[{"fixed":"5.3.0","introduced":"5.0.0"}],"component":"sequelize","cve_ids":["CVE-2019-11069"],"ecosystem":"npm","epss":0.01823,"exploited":false,"fixed_versions":["5.3.0"],"ghsa_id":"GHSA-2777-2vq8-c4v4","id":"tcs_01M5KES8A0ABENDXQPTBKD9XPF","modified_at":"2023-11-20T22:07:00Z","published_at":"2019-04-11T16:33:17Z","references":["https://osv.dev/vulnerability/GHSA-2777-2vq8-c4v4","https://nvd.nist.gov/vuln/detail/CVE-2019-11069","https://github.com/sequelize/sequelize/pull/10746","https://github.com/sequelize/sequelize/pull/10746/files","https://github.com/sequelize/sequelize/commit/850c7fd04669e0fef9238b6dc4f8d6ee93ed71e9","https://github.com/sequelize/sequelize","https://github.com/sequelize/sequelize/blob/98cb17c17f73e2aa1792aa5a1d31216ba984b456/lib/dialects/postgres/connection-manager.js#L158-L160","https://github.com/sequelize/sequelize/releases/tag/v5.3.0","https://snyk.io/vuln/SNYK-JS-SEQUELIZE-174167"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2777-2vq8-c4v4","url":"https://osv.dev/vulnerability/GHSA-2777-2vq8-c4v4"}],"summary":"SQL Injection in sequelize"}