org.webjars.npm:sequelize 7.0.0-next.1

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:sequelize package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Access of Resource Using Incompatible Type ('Type Confusion') org.webjars.npm:sequelize is a promise-based Node.js ORM for Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') due to improper user-input sanitization, due to unsafe fall-through in `GET WHERE` conditions. How to fix Access of Resource Using Incompatible Type ('Type Confusion')? A fix was pushed into the `master` branch but not yet published.	[0,)
M Information Exposure org.webjars.npm:sequelize is a promise-based Node.js ORM for Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server. Affected versions of this package are vulnerable to Information Exposure due to improper user-input, by allowing an attacker to create malicious queries leading to SQL errors. How to fix Information Exposure? A fix was pushed into the `master` branch but not yet published.	[0,)
H Improper Filtering of Special Elements org.webjars.npm:sequelize is a promise-based Node.js ORM for Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server. Affected versions of this package are vulnerable to Improper Filtering of Special Elements due to attributes not being escaped if they included `(` and `)`, or were equal to `*` and were split if they included the character `.`. How to fix Improper Filtering of Special Elements? A fix was pushed into the `master` branch but not yet published.	[0,)

Vulnerability

Vulnerable Version

Access of Resource Using Incompatible Type ('Type Confusion')

org.webjars.npm:sequelize is a promise-based Node.js ORM for Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server.

Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') due to improper user-input sanitization, due to unsafe fall-through in GET WHERE conditions.

How to fix Access of Resource Using Incompatible Type ('Type Confusion')?

A fix was pushed into the master branch but not yet published.

[0,)

Information Exposure

org.webjars.npm:sequelize is a promise-based Node.js ORM for Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server.

Affected versions of this package are vulnerable to Information Exposure due to improper user-input, by allowing an attacker to create malicious queries leading to SQL errors.

How to fix Information Exposure?

A fix was pushed into the master branch but not yet published.

[0,)

Improper Filtering of Special Elements

org.webjars.npm:sequelize is a promise-based Node.js ORM for Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server.

Affected versions of this package are vulnerable to Improper Filtering of Special Elements due to attributes not being escaped if they included ( and ), or were equal to * and were split if they included the character ..

How to fix Improper Filtering of Special Elements?

A fix was pushed into the master branch but not yet published.

[0,)

org.webjars.npm:sequelize@7.0.0-next.1

latest version

first published

latest version published

licenses detected

package registry

Direct Vulnerabilities

Fix vulnerabilities automatically