{"action":"Upgrade sequelize to 3.35.1 or later.","affected":[{"fixed":"3.35.1","introduced":"0"},{"fixed":"4.44.3","introduced":"4.0.0"},{"fixed":"5.8.11","introduced":"5.0.0"}],"component":"sequelize","cve_ids":["CVE-2019-10748"],"ecosystem":"npm","epss":0.01315,"exploited":false,"fixed_versions":["3.35.1","4.44.3","5.8.11"],"ghsa_id":"GHSA-j9xp-92vc-559j","id":"tcs_01M5KFXKX4F3SW1FAA31XX3VQB","modified_at":"2026-07-08T05:56:36.187065623Z","published_at":"2019-11-06T17:11:10Z","references":["https://osv.dev/vulnerability/GHSA-j9xp-92vc-559j","https://nvd.nist.gov/vuln/detail/CVE-2019-10748","https://github.com/sequelize/sequelize/pull/11089,","https://github.com/sequelize/sequelize/commit/a72a3f5,","https://snyk.io/vuln/SNYK-JS-SEQUELIZE-450221","https://www.npmjs.com/advisories/1018"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j9xp-92vc-559j","url":"https://osv.dev/vulnerability/GHSA-j9xp-92vc-559j"}],"summary":"SQL Injection in sequelize"}