Skip to content

[Snyk] Upgrade sequelize from 6.3.5 to 6.37.4 - #61

Open
GLOBAL-FINTECH wants to merge 1 commit into
mainfrom
snyk-upgrade-0657a74181af79cfccf77ffffbcf77c2
Open

[Snyk] Upgrade sequelize from 6.3.5 to 6.37.4#61
GLOBAL-FINTECH wants to merge 1 commit into
mainfrom
snyk-upgrade-0657a74181af79cfccf77ffffbcf77c2

Conversation

@GLOBAL-FINTECH

@GLOBAL-FINTECHGLOBAL-FINTECH commented Oct 28, 2024

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to upgrade sequelize from 6.3.5 to 6.37.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 86 versions ahead of your current version.

  • The recommended version was released on 24 days ago.

Issues fixed by the recommended upgrade:

IssueScoreExploit Maturity
high severityCode Injection
SNYK-JS-LODASH-1040724		479Proof of Concept
high severityDirectory Traversal
SNYK-JS-MOMENT-2440688		479No Known Exploit
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238		479Proof of Concept
high severitySQL Injection
SNYK-JS-SEQUELIZE-2959225		479No Known Exploit
high severityImproper Filtering of Special Elements
SNYK-JS-SEQUELIZE-3324088		479No Known Exploit
high severityPrototype Pollution
SNYK-JS-DOTTIE-3332763		479Proof of Concept
medium severityInformation Exposure
SNYK-JS-SEQUELIZE-3324089		479No Known Exploit
medium severityAccess of Resource Using Incompatible Type ('Type Confusion')
SNYK-JS-SEQUELIZE-3324090		479No Known Exploit
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		479Proof of Concept
critical severitySQL Injection
SNYK-JS-SEQUELIZE-2932027		479Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599		479Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601		479Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602		479Proof of Concept
Release notes
Package name: sequelize
  • 6.37.4 - 2024-10-04

    6.37.4 (2024-10-04)

    Bug Fixes

    • oracle: add support for Oracle Database 23ai (#17345) (b9e71a7)
    • oracle: validate input with TO_TIMESTAMP_TZ and TO_DATE (#17516) (5deadd2)
  • 6.37.3 - 2024-04-13

    6.37.3 (2024-04-13)

    Bug Fixes

    • postgres: use schema for foreign key constrains of a table (#17099) (6aba382)
  • 6.37.2 - 2024-03-29

    6.37.2 (2024-03-29)

    Bug Fixes

    • add readOnly to the transaction options types and docs (#17226) (7c8972f)
  • 6.37.1 - 2024-02-18
  • 6.37.0 - 2024-02-11
  • 6.36.0 - 2024-02-02
  • 6.35.2 - 2023-12-11
  • 6.35.1 - 2023-11-19
  • 6.35.0 - 2023-11-12
  • 6.34.0 - 2023-11-03
  • 6.33.0 - 2023-09-08
  • 6.32.1 - 2023-06-17
  • 6.32.0 - 2023-06-01
  • 6.31.1 - 2023-05-01
  • 6.31.0 - 2023-04-09
  • 6.30.0 - 2023-03-24
  • 6.29.3 - 2023-03-10
  • 6.29.2 - 2023-03-09
  • 6.29.1 - 2023-03-07
  • 6.29.0 - 2023-02-23
  • 6.28.2 - 2023-02-22
  • 6.28.1 - 2023-02-21
  • 6.28.0 - 2022-12-20
  • 6.27.0 - 2022-12-12
  • 6.26.0 - 2022-11-29
  • 6.25.8 - 2022-11-22
  • 6.25.7 - 2022-11-19
  • 6.25.6 - 2022-11-15
  • 6.25.5 - 2022-11-07
  • 6.25.4 - 2022-11-05
  • 6.25.3 - 2022-10-19
  • 6.25.2 - 2022-10-15
  • 6.25.1 - 2022-10-13
  • 6.25.0 - 2022-10-11
  • 6.24.0 - 2022-10-04
  • 6.23.2 - 2022-09-27
  • 6.23.1 - 2022-09-22
  • 6.23.0 - 2022-09-17
  • 6.22.1 - 2022-09-16
  • 6.22.0 - 2022-09-15
  • 6.21.6 - 2022-09-09
  • 6.21.5 - 2022-09-08
  • 6.21.4 - 2022-08-18
  • 6.21.3 - 2022-07-11
  • 6.21.2 - 2022-06-28
  • 6.21.1 - 2022-06-25
  • 6.21.0 - 2022-06-16
  • 6.20.1 - 2022-05-27
  • 6.20.0 - 2022-05-23
  • 6.19.2 - 2022-05-18
  • 6.19.1 - 2022-05-17
  • 6.19.0 - 2022-04-12
  • 6.18.0 - 2022-04-03
  • 6.17.0 - 2022-02-25
  • 6.16.3 - 2022-02-24
  • 6.16.2 - 2022-02-18
  • 6.16.1 - 2022-02-09
  • 6.16.0 - 2022-02-08
  • 6.15.1 - 2022-02-06
  • 6.15.0 - 2022-01-29
  • 6.14.1 - 2022-01-25
  • 6.14.0 - 2022-01-22
  • 6.13.0 - 2022-01-10
  • 6.12.5 - 2022-01-04
  • 6.12.4 - 2021-12-28
  • 6.12.3 - 2021-12-27
  • 6.12.2 - 2021-12-22
  • 6.12.1 - 2021-12-21
  • 6.12.0 - 2021-12-17
  • 6.12.0-beta.3 - 2021-12-12
  • 6.12.0-beta.2 - 2021-12-10
  • 6.12.0-beta.1 - 2021-12-04
  • 6.12.0-alpha.1 - 2021-11-19
  • 6.11.0 - 2021-11-18
  • 6.10.0 - 2021-11-18
  • 6.9.0 - 2021-11-01
  • 6.8.0 - 2021-10-24
  • 6.7.0 - 2021-10-09
  • 6.6.5 - 2021-07-06
  • 6.6.4 - 2021-06-26
  • 6.6.2 - 2021-03-23
  • 6.6.1 - 2021-03-22
  • 6.6.0 - 2021-03-21
  • 6.5.1 - 2021-03-14
  • 6.5.0 - 2021-01-27
  • 6.4.0 - 2021-01-18
  • 6.3.5 - 2020-09-01
from sequelize GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"sequelize","from":"6.3.5","to":"6.37.4"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-LODASH-1040724","issue_id":"SNYK-JS-LODASH-1040724","priority_score":681,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.2","score":360},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Code Injection"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-MOMENT-2440688","issue_id":"SNYK-JS-MOMENT-2440688","priority_score":589,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Directory Traversal"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-MOMENT-2944238","issue_id":"SNYK-JS-MOMENT-2944238","priority_score":696,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-SEQUELIZE-2959225","issue_id":"SNYK-JS-SEQUELIZE-2959225","priority_score":564,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7","score":350},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"SQL Injection"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-SEQUELIZE-3324088","issue_id":"SNYK-JS-SEQUELIZE-3324088","priority_score":629,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"8.3","score":415},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Filtering of Special Elements"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-DOTTIE-3332763","issue_id":"SNYK-JS-DOTTIE-3332763","priority_score":696,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Prototype Pollution"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-SEQUELIZE-3324089","issue_id":"SNYK-JS-SEQUELIZE-3324089","priority_score":479,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Information Exposure"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-SEQUELIZE-3324090","issue_id":"SNYK-JS-SEQUELIZE-3324090","priority_score":529,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.3","score":315},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Access of Resource Using Incompatible Type ('Type Confusion')"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-LODASH-1018905","issue_id":"SNYK-JS-LODASH-1018905","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-SEQUELIZE-2932027","issue_id":"SNYK-JS-SEQUELIZE-2932027","priority_score":791,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"9.4","score":470},{"type":"scoreVersion","label":"v1","score":1}],"severity":"critical","title":"SQL Injection"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-VALIDATOR-1090599","issue_id":"SNYK-JS-VALIDATOR-1090599","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-VALIDATOR-1090601","issue_id":"SNYK-JS-VALIDATOR-1090601","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-VALIDATOR-1090602","issue_id":"SNYK-JS-VALIDATOR-1090602","priority_score":586,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Regular Expression Denial of Service (ReDoS)"}],"prId":"c75d185f-174a-4ce2-bf1f-f31a0e756f09","prPublicId":"c75d185f-174a-4ce2-bf1f-f31a0e756f09","packageManager":"npm","priorityScoreList":[681,589,696,564,629,696,479,529,586,791,586,586,586],"projectPublicId":"208dc152-1bbe-46e7-9626-6868f959be29","projectUrl":"https://app.snyk.io/org/tizukanji/project/208dc152-1bbe-46e7-9626-6868f959be29?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-LODASH-1040724","SNYK-JS-MOMENT-2440688","SNYK-JS-MOMENT-2944238","SNYK-JS-SEQUELIZE-2959225","SNYK-JS-SEQUELIZE-3324088","SNYK-JS-DOTTIE-3332763","SNYK-JS-SEQUELIZE-3324089","SNYK-JS-SEQUELIZE-3324090","SNYK-JS-LODASH-1018905","SNYK-JS-SEQUELIZE-2932027","SNYK-JS-VALIDATOR-1090599","SNYK-JS-VALIDATOR-1090601","SNYK-JS-VALIDATOR-1090602"],"upgradeInfo":{"versionsDiff":86,"publishedDate":"2024-10-04T14:21:12.689Z"},"vulns":["SNYK-JS-LODASH-1040724","SNYK-JS-MOMENT-2440688","SNYK-JS-MOMENT-2944238","SNYK-JS-SEQUELIZE-2959225","SNYK-JS-SEQUELIZE-3324088","SNYK-JS-DOTTIE-3332763","SNYK-JS-SEQUELIZE-3324089","SNYK-JS-SEQUELIZE-3324090","SNYK-JS-LODASH-1018905","SNYK-JS-SEQUELIZE-2932027","SNYK-JS-VALIDATOR-1090599","SNYK-JS-VALIDATOR-1090601","SNYK-JS-VALIDATOR-1090602"]}'

@snyk-bot
fix: upgrade sequelize from 6.3.5 to 6.37.4
6cdbbf0
Snyk has created this PR to upgrade sequelize from 6.3.5 to 6.37.4.
See this package in npm:
sequelize
See this project in Snyk:
https://app.snyk.io/org/tizukanji/project/208dc152-1bbe-46e7-9626-6868f959be29?utm_source=github&utm_medium=referral&page=upgrade-pr
@openzeppelin-code

openzeppelin-codeBot commented Oct 28, 2024

Copy link
Copy Markdown

[Snyk] Upgrade sequelize from 6.3.5 to 6.37.4

Generated at commit: 6cdbbf0551791af5b5acebd8def92cc0c48f7e58

🚨 Report Summary

Severity LevelResults
ContractsCritical
High
Medium
Low
Note
Total		0
0
0
0
0
0
DependenciesCritical
High
Medium
Low
Note
Total		0
0
0
0
0
0

For more details view the full report in OpenZeppelin Code Inspector

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@GLOBAL-FINTECH@snyk-bot