https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:17:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-54157 EUVD-2026-54157 https://cve.radiocsirt.org/vuln/euvd-2026-54157 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11069 <p>Sequelize version 5 before 5.3.0 does not properly ensure that standard conforming strings are used.</p> <p>Sequelize version 5 before 5.3.0 does not properly ensure that standard conforming strings are used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11069 https://cve.radiocsirt.org/vuln/ghsa-2777-2vq8-c4v4 <p><strong>Affected:</strong> npm: sequelize</p> <p>Versions of `sequelize` prior to 5.3.0 (excluding v3 and v4) are vulnerable to SQL Injection. PostgreSQL option`standard_conforming_strings` is not set to `on` by default, which may allow attackers to inject SQL statements due to poor handling of backslashes in string literals.</p> <p>## Recommendation</p> <p>Upgrade to version 5.3.0 or later.</p> <p><strong>Affected:</strong> npm: sequelize</p> <p>Versions of `sequelize` prior to 5.3.0 (excluding v3 and v4) are vulnerable to SQL Injection. PostgreSQL option`standard_conforming_strings` is not set to `on` by default, which may allow attackers to inject SQL statements due to poor handling of backslashes in string literals.</p> <p>## Recommendation</p> <p>Upgrade to version 5.3.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-2777-2vq8-c4v4 https://cve.radiocsirt.org/vuln/gsd-2019-11069 gsd-2019-11069 https://cve.radiocsirt.org/vuln/gsd-2019-11069