https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:11:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-53944 EUVD-2026-53944 https://cve.radiocsirt.org/vuln/euvd-2026-53944 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10749 <p>sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly sanitized in the Postgres dialect.</p> <p>sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly sanitized in the Postgres dialect.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10749 https://cve.radiocsirt.org/vuln/ghsa-2598-2f59-rmhq <p><strong>Affected:</strong> npm: sequelize</p> <p>Versions of `sequelize` prior to 3.35.1 are vulnerable to SQL Injection. The package fails to sanitize JSON path keys in the Postgres dialect, which may allow attackers to inject SQL statements and execute arbitrary SQL queries.</p> <p>## Recommendation</p> <p>Upgrade to version 3.35.1 or later.</p> <p><strong>Affected:</strong> npm: sequelize</p> <p>Versions of `sequelize` prior to 3.35.1 are vulnerable to SQL Injection. The package fails to sanitize JSON path keys in the Postgres dialect, which may allow attackers to inject SQL statements and execute arbitrary SQL queries.</p> <p>## Recommendation</p> <p>Upgrade to version 3.35.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-2598-2f59-rmhq https://cve.radiocsirt.org/vuln/gsd-2019-10749 gsd-2019-10749 https://cve.radiocsirt.org/vuln/gsd-2019-10749