Sequelizejs Sequelize 7.0.0 Alpha 18 for Node.js

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sequelizejs:sequelize:7.0.0:alpha18:*:*:*:node.js:*:*

part: a version: 7.0.0 update: alpha18

VendorSequelizejs (7254647b-6e68-58e3-8adf-e5941eb57e61)
ProductSequelize (a6da9fce-ffa2-518d-bdd5-52204968f4b6)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/sequelize/sequelize purl2cpe 2026-06-01 10:12:57.443387
pkg:npm/sequelize purl2cpe 2026-06-01 10:12:57.443388
pkg:sourceforge/sequelize.mirror purl2cpe 2026-06-01 10:12:57.443389

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22580 vulnerable 2026-06-08 05:54:26.520724 Sequalize - Bad query filtering leading to SQL errors
MEDIUM (5.3)
Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.
Published: 2023-02-16T14:11:35.881Z
Updated: 2025-04-01T04:48:15.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22579 vulnerable 2026-06-08 05:54:26.519786 Sequalize - Unsafe fall-through in getWhereConditions
CRITICAL (9.9)
Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.
Published: 2023-02-16T14:11:37.235Z
Updated: 2025-04-01T04:48:14.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22578 vulnerable 2026-06-08 05:54:26.510967 Sequalize - Default support for “raw attributes” when using parentheses
CRITICAL (10)
Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.
Published: 2023-02-16T14:11:36.631Z
Updated: 2025-04-01T04:48:17.055Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.