https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:36:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-180903 EUVD-2026-180903 https://cve.radiocsirt.org/vuln/euvd-2026-180903 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10554 <p>sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, even though SQLite uses Postgres escaping.</p> <p>sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, even though SQLite uses Postgres escaping.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-10554 https://cve.radiocsirt.org/vuln/ghsa-x2jc-pwfj-h9p3 <p><strong>Affected:</strong> npm: sequelize</p> <p>Affected versions of `sequelize` use MySQL&#39;s backslash-based escape syntax when connecting to SQLite, despite the fact that SQLite uses PostgreSQL&#39;s escape syntax, which can result in a SQL Injection vulnerability.</p> <p>## Recommendation</p> <p>Update to version 1.7.0-alpha3 or later.</p> <p><strong>Affected:</strong> npm: sequelize</p> <p>Affected versions of `sequelize` use MySQL&#39;s backslash-based escape syntax when connecting to SQLite, despite the fact that SQLite uses PostgreSQL&#39;s escape syntax, which can result in a SQL Injection vulnerability.</p> <p>## Recommendation</p> <p>Update to version 1.7.0-alpha3 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-x2jc-pwfj-h9p3 https://cve.radiocsirt.org/vuln/gsd-2016-10554 gsd-2016-10554 https://cve.radiocsirt.org/vuln/gsd-2016-10554