{"action":"Upgrade sequelize to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"sequelize","cve_ids":["CVE-2016-10553"],"ecosystem":"npm","epss":0.01265,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-2v7q-2xqx-f4q5","id":"tcs_01M5KEV3MNNQS5568MFC37X7EB","modified_at":"2023-11-08T03:58:12.201688Z","published_at":"2019-02-18T23:54:32Z","references":["https://osv.dev/vulnerability/GHSA-2v7q-2xqx-f4q5","https://nvd.nist.gov/vuln/detail/CVE-2016-10553","https://github.com/advisories/GHSA-2v7q-2xqx-f4q5","https://github.com/sequelize/sequelize/blob/master/changelog.md#300","https://www.npmjs.com/advisories/109"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-2v7q-2xqx-f4q5","url":"https://osv.dev/vulnerability/GHSA-2v7q-2xqx-f4q5"}],"summary":"Potential SQL Injection in sequelize"}