https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:11:10.721635+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-53944 EUVD-2026-53944 2026-10-03T17:11:10.724248+00:00 EUVD-2026-53944 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10749 fkie_cve-2019-10749 2026-10-03T17:11:10.724279+00:00

sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly sanitized in the Postgres dialect.

 https://cve.radiocsirt.org/vuln/ghsa-2598-2f59-rmhq GHSA-2598-2f59-rmhq — SQL Injection in sequelize 2026-10-03T17:11:10.724309+00:00

Affected: npm: sequelize

Versions of `sequelize` prior to 3.35.1 are vulnerable to SQL Injection. The package fails to sanitize JSON path keys in the Postgres dialect, which may allow attackers to inject SQL statements and execute arbitrary SQL queries.

## Recommendation

Upgrade to version 3.35.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-10749 gsd-2019-10749 2026-10-03T17:11:10.724335+00:00 gsd-2019-10749