{"action":"Upgrade sequelize to 6.29.0 or later.","affected":[{"fixed":"6.29.0","introduced":"0"}],"component":"sequelize","cve_ids":["CVE-2023-22578"],"ecosystem":"npm","epss":0.00831,"exploited":false,"fixed_versions":["6.29.0"],"ghsa_id":"GHSA-f598-mfpv-gmfx","id":"tcs_01M5KFMGXVRBFXYD23J4WNEWSR","modified_at":"2023-11-08T04:11:36.970852Z","published_at":"2023-02-24T18:48:49Z","references":["https://osv.dev/vulnerability/GHSA-f598-mfpv-gmfx","https://github.com/sequelize/sequelize/security/advisories/GHSA-f598-mfpv-gmfx","https://nvd.nist.gov/vuln/detail/CVE-2023-22578","https://github.com/sequelize/sequelize/pull/15710","https://csirt.divd.nl/CVE-2023-22578","https://csirt.divd.nl/DIVD-2022-00020","https://github.com/sequelize/sequelize","https://github.com/sequelize/sequelize/discussions/15694","https://github.com/sequelize/sequelize/releases/tag/v6.29.0","https://github.com/sequelize/sequelize/releases/tag/v7.0.0-alpha.20"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-f598-mfpv-gmfx#npm/sequelize","url":"https://osv.dev/vulnerability/GHSA-f598-mfpv-gmfx"}],"summary":"Sequelize - Default support for “raw attributes” when using parentheses"}