{"action":"Upgrade sequelize to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"0"}],"component":"sequelize","cve_ids":["CVE-2016-10554"],"ecosystem":"npm","epss":0.01884,"exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-x2jc-pwfj-h9p3","id":"tcs_01M5KGGH84B4556HAQD2J00K1Q","modified_at":"2023-11-08T03:58:12.264608Z","published_at":"2019-02-18T23:54:28Z","references":["https://osv.dev/vulnerability/GHSA-x2jc-pwfj-h9p3","https://nvd.nist.gov/vuln/detail/CVE-2016-10554","https://github.com/sequelize/sequelize/commit/c876192aa6ce1f67e22b26a4d175b8478615f42d","https://github.com/advisories/GHSA-x2jc-pwfj-h9p3","https://www.npmjs.com/advisories/113"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-x2jc-pwfj-h9p3","url":"https://osv.dev/vulnerability/GHSA-x2jc-pwfj-h9p3"}],"summary":"SQL Injection in sequelize"}