https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:59:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-176273 EUVD-2026-176273 https://cve.radiocsirt.org/vuln/euvd-2026-176273 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10550 <p>sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS If user input goes into the `limit` or `order` parameters, a malicious user can put in their own SQL statements. This affects sequelize 3.16.0 and earlier.</p> <p>sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS If user input goes into the `limit` or `order` parameters, a malicious user can put in their own SQL statements. This affects sequelize 3.16.0 and earlier.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-10550 https://cve.radiocsirt.org/vuln/ghsa-98pq-pmw9-4gpm <p><strong>Affected:</strong> npm: sequelize</p> <p>Affected versions of `sequelize` are vulnerable to SQL Injection in locations where user input is passed into the `limit` or `order` parameters of `sequelize` query calls, such as `findOne` or `findAll`.</p> <p>## Recommendation</p> <p>Update to version 3.17.0 or later.</p> <p><strong>Affected:</strong> npm: sequelize</p> <p>Affected versions of `sequelize` are vulnerable to SQL Injection in locations where user input is passed into the `limit` or `order` parameters of `sequelize` query calls, such as `findOne` or `findAll`.</p> <p>## Recommendation</p> <p>Update to version 3.17.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-98pq-pmw9-4gpm https://cve.radiocsirt.org/vuln/gsd-2016-10550 gsd-2016-10550 https://cve.radiocsirt.org/vuln/gsd-2016-10550