{"action":"Upgrade sequelize to 3.20.0 or later.","affected":[{"fixed":"3.20.0","introduced":"0"}],"component":"sequelize","cve_ids":["CVE-2016-10556"],"ecosystem":"npm","epss":0.01297,"exploited":false,"fixed_versions":["3.20.0"],"ghsa_id":"GHSA-9c2p-jw8p-f84v","id":"tcs_01M5KFFE0R1BGR51XH3ZN7D4R7","modified_at":"2023-11-08T03:58:12.386286Z","published_at":"2019-02-18T23:54:24Z","references":["https://osv.dev/vulnerability/GHSA-9c2p-jw8p-f84v","https://nvd.nist.gov/vuln/detail/CVE-2016-10556","https://github.com/sequelize/sequelize/issues/5671","https://github.com/sequelize/sequelize/commit/23952a2b020cc3571f090e67dae7feb084e1be71","https://github.com/sequelize/sequelize/commits/v3.20.0?after=62e4dacb28a779a190a3e042b971dcd8c7926e49+34&branch=v3.20.0&qualified_name=refs%2Ftags%2Fv3.20.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9c2p-jw8p-f84v","url":"https://osv.dev/vulnerability/GHSA-9c2p-jw8p-f84v"}],"summary":"SQL Injection in sequelize"}