Critical
CVE-2026-69240
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 28
Reset filters
Critical
CVE-2026-52887
NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE
High
CVE-2026-41640
@nocobase/database has SQL Injection via String Concatenation through Recursive Eager Loading
High
CVE-2026-41641
@nocobase/plugin-collection-sql: SQL Validation Bypass Through Missing `checkSQL` Call
High
CVE-2026-34825
NocoBase Has SQL Injection via template variable substitution in workflow SQL node
High
CVE-2026-30951
Sequelize v6 Vulnerable to SQL Injection via JSON Column Cast Type
Medium
CVE-2026-27837
dottie is vulnerable to Prototype Pollution bypass via non-first path segments in set() and transform()
High
CVE-2023-6293
sequelize-typescript Prototype Pollution vulnerability
Critical
CVE-2023-22578
Sequelize - Default support for “raw attributes” when using parentheses
Critical
CVE-2023-22579
Unsafe fall-through in getWhereConditions
Critical
CVE-2023-25813
Sequelize vulnerable to SQL Injection via replacements
Medium
CVE-2023-22580
Sequelize information disclosure vulnerability
Critical
CVE-2022-29823
Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution
Critical
CVE-2022-29822
feathers-sequelize vulnerable to SQL injection due to improper parameter filtering
Critical
CVE-2022-2422
feathers-sequelize contains improper input validation leading to SQL injection
Medium
ghsa-fw4p-36j9-rrj3
Denial of Service in sequelize
Critical
CVE-2016-1000225
SQL Injection via GeoJSON in sequelize
Critical
CVE-2019-10749
SQL Injection in sequelize
Critical
CVE-2019-10748
SQL Injection in sequelize
Critical
CVE-2019-10752
SQL Injection in sequelize
Low
ghsa-3xc7-xg67-pw99
Sensitive Data Exposure in sequelize-cli
High
ghsa-wfp9-vr4j-f49j
NoSQL Injection in sequelize
High
CVE-2019-11069
SQL Injection in sequelize
High
CVE-2016-10550
SQL Injection in sequelize
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.