https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:21:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-226390 EUVD-2026-226390 https://cve.radiocsirt.org/vuln/euvd-2026-226390 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22579 <p>Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.</p> <p>Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-22579 https://cve.radiocsirt.org/vuln/ghsa-vqfx-gj96-3w95 <p><strong>Affected:</strong> npm: sequelize, npm: @sequelize/core</p> <p>### Impact</p> <p>Providing an invalid value to the `where` option of a query caused Sequelize to ignore that option instead of throwing an error.</p> <p>A finder call like the following did not throw an error:</p> <p>```ts User.findAll({ where: new Date(), }); ```</p> <p>As this option is typically used with plain javascript objects, be aware that this only happens at the top level of this option.</p> <p>### Patches</p> <p>This issue has been patched in [`sequelize@6.28.1`](https://github.com/sequelize/sequelize/pull/15699) &amp; [`@sequelize/core@7.0.0.alpha-20`](https://github.com/sequelize/sequelize/pull/15375)</p> <p>### References</p> <p>A discussion thread about this issue is open at https://github.com/sequelize/sequelize/discussions/15698</p> <p>CVE: CVE-2023-22579 Snyk: https://security.snyk.io/vuln/SNYK-JS-SEQUELIZE-3324090</p> <p><strong>Affected:</strong> npm: sequelize, npm: @sequelize/core</p> <p>### Impact</p> <p>Providing an invalid value to the `where` option of a query caused Sequelize to ignore that option instead of throwing an error.</p> <p>A finder call like the following did not throw an error:</p> <p>```ts User.findAll({ where: new Date(), }); ```</p> <p>As this option is typically used with plain javascript objects, be aware that this only happens at the top level of this option.</p> <p>### Patches</p> <p>This issue has been patched in [`sequelize@6.28.1`](https://github.com/sequelize/sequelize/pull/15699) &amp; [`@sequelize/core@7.0.0.alpha-20`](https://github.com/sequelize/sequelize/pull/15375)</p> <p>### References</p> <p>A discussion thread about this issue is open at https://github.com/sequelize/sequelize/discussions/15698</p> <p>CVE: CVE-2023-22579 Snyk: https://security.snyk.io/vuln/SNYK-JS-SEQUELIZE-3324090</p> https://cve.radiocsirt.org/vuln/ghsa-vqfx-gj96-3w95 https://cve.radiocsirt.org/vuln/gsd-2023-22579 gsd-2023-22579 https://cve.radiocsirt.org/vuln/gsd-2023-22579