Security Advisory
CVE-2019-10748
9.8
CRITICAL
Vulnerability Description
Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnerable to SQL Injection due to JSON path keys not being properly escaped for the MySQL/MariaDB dialects.
Published Date
October 29, 2019
Official Source
NIST NVD Advisory