GitHub Advisoryadvisory · npm

GHSA-7pvx-4585-hqww sequelize-typescript Prototype Pollution vulnerability

HIGH Published 2023-11-24 Modified 2023-12-01 Official page ↗

Aliases: CVE-2023-6293
Ecosystem: npm
Packages: sequelize-typescript
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-1321
Reviewed: 2023-12-01

Affected packages

• npm sequelize-typescript: < 2.1.6 → fixed in 2.1.6

Description

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.

Related

Alias · CVE (1)

CVE-2023-6293 Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6. vulnerability

Weakness · CWE (1)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References