HIGH
Prototype Pollution in robinbuschmann/sequelize-typescript
Published Nov 24, 2023
7.1
HIGHCVSS 3.1
EPSS 0.59%
Description
Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.
Affected products
-
Affected
- ≥ unspecified, < 2.1.6
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Robinbuschmann | Robinbuschmann/sequelize-Typescript | unknown | Affected
|
- < 2.1.6
No data.
No Red Hat product state for this CVE.
sequelize-typescript
npm
Introduced 0 Fixed 2.1.6
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | sequelize-typescript | 0 | 2.1.6 |
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2910 Advisory
- https://github.com/advisories/GHSA-7pvx-4585-hqww Advisory
- https://github.com/robinbuschmann/sequelize-typescript/commit/5ce8afdd1671b08c774ce106b000605ba8fccf78 Patch
- https://huntr.com/bounties/36a7ecbf-4d3d-462e-86a3-cda7b1ec64e2 ExploitPatchThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-6293
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner @huntr_ai
Published Nov 24, 2023
Updated Aug 2, 2024
Reserved Nov 24, 2023
Link CVE-2023-6293
CISA Vulnrichment
No data
Red Hat
No data
GitHub
Link GHSA-7PVX-4585-HQWW