Known vulnerabilities in Sequelize

Vendor: npm Inc.
Software: Sequelize
Software CPE: cpe:2.3:a:npm:sequelize:*:*:*:*:*:nodejs:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Sequelize Sequelize is affected by 9 known vulnerabilities: 3 high, 6 medium Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128016 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-30951
CWE-89 Medium
No
No
6.37.8 27.04.2026 SB2026042752
#VU128015 - Improper Filtering of Special Elements
CVE-2023-22578
CWE-790 High
No
No
6.29.0 24.02.2023 SB2023022440
#VU128013 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-25813
CWE-89 High
No
No
6.19.1 22.02.2023 SB2023022262
#VU128014 - Type confusion
CVE-2023-22579
CWE-843 Medium
No
No
6.28.1 21.02.2023 SB20230221100
#VU24730 - Resource exhaustion
CWE-400 Medium
No
No
5.0.0 29.01.2020 SB2020012909
#VU23950 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-10752
CWE-89 High
No
No
4.44.3, 5.15.1 06.01.2020 SB2019090519
#VU18917 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-11069
CWE-89 Medium
No
No
5.3.0 25.06.2019 SB2019041030
#VU18915 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-10749
CWE-89 Medium
No
No
3.35.1 25.06.2019 SB2019062514
#VU18914 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-10748
CWE-89 Medium
No
No
5.8.11 25.06.2019 SB2019062514