https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:17:31.918061+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-54157 EUVD-2026-54157 2026-10-03T01:17:31.921341+00:00 EUVD-2026-54157 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11069 fkie_cve-2019-11069 2026-10-03T01:17:31.921382+00:00

Sequelize version 5 before 5.3.0 does not properly ensure that standard conforming strings are used.

 https://cve.radiocsirt.org/vuln/ghsa-2777-2vq8-c4v4 GHSA-2777-2vq8-c4v4 — SQL Injection in sequelize 2026-10-03T01:17:31.921421+00:00

Affected: npm: sequelize

Versions of `sequelize` prior to 5.3.0 (excluding v3 and v4) are vulnerable to SQL Injection. PostgreSQL option`standard_conforming_strings` is not set to `on` by default, which may allow attackers to inject SQL statements due to poor handling of backslashes in string literals.

## Recommendation

Upgrade to version 5.3.0 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-11069 gsd-2019-11069 2026-10-03T01:17:31.921460+00:00 gsd-2019-11069