https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:32:12.541586+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-19314 cnvd-2019-19314 2026-10-03T05:32:12.606484+00:00 cnvd-2019-19314 https://cve.radiocsirt.org/vuln/euvd-2026-53930 EUVD-2026-53930 2026-10-03T05:32:12.606521+00:00 EUVD-2026-53930 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10748 fkie_cve-2019-10748 2026-10-03T05:32:12.606536+00:00

Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnerable to SQL Injection due to JSON path keys not being properly escaped for the MySQL/MariaDB dialects.

 https://cve.radiocsirt.org/vuln/ghsa-j9xp-92vc-559j GHSA-j9xp-92vc-559j — SQL Injection in sequelize 2026-10-03T05:32:12.606566+00:00

Affected: npm: sequelize

Affected versions of `sequelize` are vulnerable to SQL Injection. The package fails to sanitize JSON path keys in the MariaDB and MySQL dialects, which may allow attackers to inject SQL statements and execute arbitrary SQL queries.

## Recommendation

If you are using `sequelize` 5.x, upgrade to version 5.8.11 or later. If you are using `sequelize` 4.x, upgrade to version 4.44.3 or later. If you are using `sequelize` 3.x, upgrade to version 3.35.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-10748 gsd-2019-10748 2026-10-03T05:32:12.606595+00:00 gsd-2019-10748