Description

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.

Remediation

References

https://github.com/robinbuschmann/sequelize-typescript/commit/5ce8afdd1671b08c774ce106b000605ba8fccf78

https://huntr.com/bounties/36a7ecbf-4d3d-462e-86a3-cda7b1ec64e2

Related Vulnerabilities

CVE-2020-28500 Vulnerability in maven package org.webjars.bower:lodash

CVE-2020-15138 Vulnerability in maven package org.webjars:prismjs

CVE-2023-3691 Vulnerability in maven package org.webjars.bower:layui

CVE-2021-21290 Vulnerability in maven package io.netty:netty-testsuite

CVE-2023-2479 Vulnerability in npm package appium-desktop

Severity

High

Classification

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Tags

Patch Exploit Third Party Advisory NVD-CWE-noinfo