Sequelize - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2026-08-03.

Products

• Sequelize - 3 CVEs
• Sequelize-typescript - 0 CVEs

Newest CVEs of Sequelize

• CVE-2026-69240 - CVSS 9.8 (critical), 2026-08-03: Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is possible with strings only if dialect is set to oracle. The escape function defined in…
• CVE-2026-30951 - CVSS 7.5 (high), 2026-03-10: Sequelize is a Node.js ORM tool. Prior to 6.37.8, there is SQL injection via unescaped cast type in JSON/JSONB where clause processing. The _traverseJSON()…
• CVE-2023-25813 - CVSS 10 (critical), 2023-02-22: Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through…