Description
Sequelize version 5 before 5.3.0 does not properly ensure that standard conforming strings are used.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://github.com/sequelize/sequelize/pull/10746/files ↗
- https://github.com/sequelize/sequelize/releases/tag/v5.3.0 ↗
- https://github.com/sequelize/sequelize/blob/98cb17c17f73e2aa1792aa5a1d31216ba984b456/lib/dialects/postgres/connection-manager.js#L158-L160 ↗
- https://github.com/sequelize/sequelize/commit/850c7fd04669e0fef9238b6dc4f8d6ee93ed71e9 ↗