NuytsTech Security

CVE-2019-11069

by ·

Sequelize version 5 before 5.3.0 does not properly ensure that standard conforming strings are used.

Date published : 2019-04-10

https://github.com/sequelize/sequelize/blob/98cb17c17f73e2aa1792aa5a1d31216ba984b456/lib/dialects/postgres/connection-manager.js#L158-L160

https://github.com/sequelize/sequelize/pull/10746/files

Tags: