Описание
Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elements
Duplicate advisory
This advisory has been withdrawn because it is a duplicate of GHSA-f598-mfpv-gmfx. This link is maintained to preserve external references.
Original Description
Due to improper attribute filtering in the sequelize js library, an attacker can peform SQL injections. This issue can be mitigated by not accepting untrusted input.
Пакеты
Наименование
@sequelize/core
npm
Затронутые версииВерсия исправления
< 7.0.0-alpha.20
7.0.0-alpha.20
Наименование
sequelize
npm
Затронутые версииВерсия исправления
<= 6.28.2
6.29.0
10 Critical
CVSS3
Дефекты
CWE-790
10 Critical
CVSS3
Дефекты
CWE-790