Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnerable to SQL Injection due to JSON path keys not being properly escaped for the MySQL/MariaDB dialects.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2019-10-28T21:42:45

Updated: 2024-08-04T22:32:01.529Z

Reserved: 2019-04-03T00:00:00

Link: CVE-2019-10748

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-10-29T19:15:16.687

Modified: 2024-11-21T04:19:50.657

Link: CVE-2019-10748

cve-icon Redhat

No data.