CVE-2026-30951

< 6.37.8

Sequelize is a Node.js ORM tool. Prior to 6.37.8, there is SQL injection via unescaped cast type in JSON/JSONB where clause proces

7.5HIGH

CVE-2023-6293

< 2.1.6

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.

7.1HIGH

CVE-2023-25813

< 6.19.1

Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters wh

10.0CRITICAL

CVE-2023-22580

< 6.28.1

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.

5.3MEDIUM

CVE-2023-22579

< 6.28.1

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.

9.9CRITICAL

CVE-2023-22578

< 6.29.0

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

10.0CRITICAL

CVE-2019-10749

< 3.35.1

sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly sanitized

9.8CRITICAL

CVE-2019-10748

>= 3.0.0 and < 3.35.1

Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnerable to SQL Injection due to JSON path keys not being properl

9.8CRITICAL

CVE-2019-10752

>= 4.0.0 and < 4.44.3

Sequelize, all versions prior to version 4.44.3 and 5.15.1, is vulnerable to SQL Injection due to sequelize.json() helper function

9.8CRITICAL

CVE-2019-11069

>= 5.0.0 and < 5.3.0

Sequelize version 5 before 5.3.0 does not properly ensure that standard conforming strings are used.

7.5HIGH

CVE-2016-10554

<= 1.6.0

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQ

9.8CRITICAL

CVE-2016-10553

<= 2.1.3

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQ

9.8CRITICAL

CVE-2016-10550

<= 3.16.0

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQ

9.8CRITICAL

CVE-2016-10556

<= 3.19.3

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQ

7.5HIGH

CVE-2015-1369

<= 2.0.0

SQL injection vulnerability in Sequelize before 2.0.0-rc7 for Node.js allows remote attackers to execute arbitrary SQL commands vi