CVE-2016-10554

NONE EPSS 77.3%
Published May 31, 20188y ago · Modified Jun 17, 20262w ago
Find Similar
Published May 31, 2018 8y ago
Last Modified Jun 17, 2026 2w ago

Description

sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, even though SQLite uses Postgres escaping.

Threat Intelligence

EPSS Exploit Probability
77.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 3

VendorProductVersionRange
sequelizejssequelize* ≤1.6.0
sequelizejssequelize1.7.0any
sequelizejssequelize1.7.0any

References 2

  • github.com https://github.com/sequelize/sequelize/commit/c876192aa6ce1f67e22b26a4d175b8478615f42d
    PatchThird Party Advisory
  • nodesecurity.io https://nodesecurity.io/advisories/113
    PatchThird Party Advisory

Remediation

  • github.com https://github.com/sequelize/sequelize/commit/c876192aa6ce1f67e22b26a4d175b8478615f42d
    PatchThird Party Advisory
  • nodesecurity.io https://nodesecurity.io/advisories/113
    PatchThird Party Advisory