Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2023-22578

Sequalize - Default support for “raw attributes” when using parentheses

Description

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Feathers-Sequalize Sequelize.js

Default version status: unaffected

  • <v7.0.0-alpha.20affected

References