/CVE-2026-30951

HIGHCVE-2026-30951npmCVSS 7.5

sequelize

Published

Description

Sequelize v6 Vulnerable to SQL Injection via JSON Column Cast Type

Affected Versions

>=6.0.0-beta.1

FIXED VERSIONS6.37.8

References

WEBhttps://github.com/sequelize/sequelize/security/advisories/GHSA-6457-6jrx-69cr ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-30951 PACKAGEhttps://github.com/sequelize/sequelize

Using sequelize?

Scan your dependencies and detect this automatically on every PR.

Create free account