Approved changes feed: RSS · Atom

cpe:2.3:a:feathers-sequalize:sequelize.js:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFeathers Sequalize (753cff15-c35f-52eb-905c-9404a4f3964a)
ProductSequelize.Js (a7b3dcc0-aa3c-579c-a913-5189d197e9da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22580 vulnerable 2026-06-08 05:54:26.520509 Sequalize - Bad query filtering leading to SQL errors
MEDIUM (5.3)
Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure.
Published: 2023-02-16T14:11:35.881Z
Updated: 2025-04-01T04:48:15.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22579 vulnerable 2026-06-08 05:54:26.519560 Sequalize - Unsafe fall-through in getWhereConditions
CRITICAL (9.9)
Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.
Published: 2023-02-16T14:11:37.235Z
Updated: 2025-04-01T04:48:14.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22578 vulnerable 2026-06-08 05:54:26.503500 Sequalize - Default support for “raw attributes” when using parentheses
CRITICAL (10)
Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.
Published: 2023-02-16T14:11:36.631Z
Updated: 2025-04-01T04:48:17.055Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.