{"id":"CVE-2016-10554","details":"sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, even though SQLite uses Postgres escaping.","aliases":["GHSA-x2jc-pwfj-h9p3"],"modified":"2026-07-08T12:35:36.486624Z","published":"2018-05-31T20:29:02.017Z","references":[{"type":"FIX","url":"https://github.com/sequelize/sequelize/commit/c876192aa6ce1f67e22b26a4d175b8478615f42d"},{"type":"FIX","url":"https://nodesecurity.io/advisories/113"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sequelize/sequelize","events":[{"introduced":"0"},{"last_affected":"85ad02ef32793a951cf7e3ba2575da236c0d3d6a"},{"introduced":"b2184b24f52eb36e02430814d2c3f434d9d1d8b5"},{"last_affected":"0c35b450d56441564ff3546cfcb6e7b68958a0fb"},{"fixed":"c876192aa6ce1f67e22b26a4d175b8478615f42d"}],"database_specific":{"cpe":["cpe:2.3:a:sequelizejs:sequelize:*:*:*:*:*:node.js:*:*","cpe:2.3:a:sequelizejs:sequelize:1.7.0:alpha1:*:*:*:node.js:*:*","cpe:2.3:a:sequelizejs:sequelize:1.7.0:alpha2:*:*:*:node.js:*:*"],"extracted_events":[{"introduced":"0"},{"last_affected":"1.6.0"},{"introduced":"1.7.0-alpha1"},{"last_affected":"1.7.0-alpha1"},{"introduced":"1.7.0-alpha2"},{"last_affected":"1.7.0-alpha2"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["1.7.0-alpha1","1.7.0-alpha2","v1.7.0-alpha2","v1.7.0-alpha1","v1.6.0","v1.6.0-beta4","v1.6.0-beta-3","v1.6.0-beta-2","v1.5.0-beta-2","v1.5.0-beta","v1.5.0-alpha","v1.4.1","v1.4.0","v1.3.7","v1.3.2","v1.3.1","v1.3.0","v1.2.0","v1.1.4","v1.1.3","v1.1.2","1.1.1","1.1.0","1.0.2","1.0.1","0.4.3","0.4.2","0.4.1","0.4.0","0.3.0","0.2.6","0.2.5","0.2.4","0.2.3","0.2.1","0.2.0","0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10554.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}