Sequelize

2 CVEs across 1 Sequelize products. Browse Sequelize vulnerabilities, severities, and proof-of-concept exploits.

Sequelize products with known CVEs

ProductCVEs
Sequelize3
Sequelize CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-69240Critical9.82026-08-03Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in sql-s…
CVE-2026-30951High7.52026-03-10Sequelize is a Node.js ORM tool. Prior to 6.37.8, there is SQL injection via unescaped cast type in JSON/JSONB where clause processing. The _traverseJSON() fun…
CVE-2023-25813Critical10.02023-02-22Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replac…