Skip to content

[Snyk] Upgrade sequelize from 6.3.5 to 6.37.5 - #64

Open
GLOBAL-FINTECH wants to merge 1 commit into
mainfrom
snyk-upgrade-ed6f298d5bb79d2ad03707b5ea0ff51f
Open

[Snyk] Upgrade sequelize from 6.3.5 to 6.37.5#64
GLOBAL-FINTECH wants to merge 1 commit into
mainfrom
snyk-upgrade-ed6f298d5bb79d2ad03707b5ea0ff51f

Conversation

@GLOBAL-FINTECH

@GLOBAL-FINTECHGLOBAL-FINTECH commented Jan 23, 2025

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to upgrade sequelize from 6.3.5 to 6.37.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 87 versions ahead of your current version.

  • The recommended version was released 3 months ago.

Issues fixed by the recommended upgrade:

IssueScoreExploit Maturity
high severityCode Injection
SNYK-JS-LODASH-1040724		586Proof of Concept
high severityDirectory Traversal
SNYK-JS-MOMENT-2440688		586No Known Exploit
high severitySQL Injection
SNYK-JS-SEQUELIZE-2959225		586No Known Exploit
high severityImproper Filtering of Special Elements
SNYK-JS-SEQUELIZE-3324088		586No Known Exploit
high severityPrototype Pollution
SNYK-JS-DOTTIE-3332763		586Proof of Concept
high severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238		586Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090599		586Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090601		586Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-VALIDATOR-1090602		586Proof of Concept
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		586Proof of Concept
medium severityInformation Exposure
SNYK-JS-SEQUELIZE-3324089		586No Known Exploit
medium severityAccess of Resource Using Incompatible Type ('Type Confusion')
SNYK-JS-SEQUELIZE-3324090		586No Known Exploit
critical severitySQL Injection
SNYK-JS-SEQUELIZE-2932027		586Proof of Concept
Release notes
Package name: sequelize
  • 6.37.5 - 2024-10-25

    6.37.5 (2024-10-25)

    Bug Fixes

  • 6.37.4 - 2024-10-04

    6.37.4 (2024-10-04)

    Bug Fixes

    • oracle: add support for Oracle Database 23ai (#17345) (b9e71a7)
    • oracle: validate input with TO_TIMESTAMP_TZ and TO_DATE (#17516) (5deadd2)
  • 6.37.3 - 2024-04-13

    6.37.3 (2024-04-13)

    Bug Fixes

    • postgres: use schema for foreign key constrains of a table (#17099) (6aba382)
  • 6.37.2 - 2024-03-29

    6.37.2 (2024-03-29)

    Bug Fixes

    • add readOnly to the transaction options types and docs (#17226) (7c8972f)
  • 6.37.1 - 2024-02-18
  • 6.37.0 - 2024-02-11
  • 6.36.0 - 2024-02-02
  • 6.35.2 - 2023-12-11
  • 6.35.1 - 2023-11-19
  • 6.35.0 - 2023-11-12
  • 6.34.0 - 2023-11-03
  • 6.33.0 - 2023-09-08
  • 6.32.1 - 2023-06-17
  • 6.32.0 - 2023-06-01
  • 6.31.1 - 2023-05-01
  • 6.31.0 - 2023-04-09
  • 6.30.0 - 2023-03-24
  • 6.29.3 - 2023-03-10
  • 6.29.2 - 2023-03-09
  • 6.29.1 - 2023-03-07
  • 6.29.0 - 2023-02-23
  • 6.28.2 - 2023-02-22
  • 6.28.1 - 2023-02-21
  • 6.28.0 - 2022-12-20
  • 6.27.0 - 2022-12-12
  • 6.26.0 - 2022-11-29
  • 6.25.8 - 2022-11-22
  • 6.25.7 - 2022-11-19
  • 6.25.6 - 2022-11-15
  • 6.25.5 - 2022-11-07
  • 6.25.4 - 2022-11-05
  • 6.25.3 - 2022-10-19
  • 6.25.2 - 2022-10-15
  • 6.25.1 - 2022-10-13
  • 6.25.0 - 2022-10-11
  • 6.24.0 - 2022-10-04
  • 6.23.2 - 2022-09-27
  • 6.23.1 - 2022-09-22
  • 6.23.0 - 2022-09-17
  • 6.22.1 - 2022-09-16
  • 6.22.0 - 2022-09-15
  • 6.21.6 - 2022-09-09
  • 6.21.5 - 2022-09-08
  • 6.21.4 - 2022-08-18
  • 6.21.3 - 2022-07-11
  • 6.21.2 - 2022-06-28
  • 6.21.1 - 2022-06-25
  • 6.21.0 - 2022-06-16
  • 6.20.1 - 2022-05-27
  • 6.20.0 - 2022-05-23
  • 6.19.2 - 2022-05-18
  • 6.19.1 - 2022-05-17
  • 6.19.0 - 2022-04-12
  • 6.18.0 - 2022-04-03
  • 6.17.0 - 2022-02-25
  • 6.16.3 - 2022-02-24
  • 6.16.2 - 2022-02-18
  • 6.16.1 - 2022-02-09
  • 6.16.0 - 2022-02-08
  • 6.15.1 - 2022-02-06
  • 6.15.0 - 2022-01-29
  • 6.14.1 - 2022-01-25
  • 6.14.0 - 2022-01-22
  • 6.13.0 - 2022-01-10
  • 6.12.5 - 2022-01-04
  • 6.12.4 - 2021-12-28
  • 6.12.3 - 2021-12-27
  • 6.12.2 - 2021-12-22
  • 6.12.1 - 2021-12-21
  • 6.12.0 - 2021-12-17
  • 6.12.0-beta.3 - 2021-12-12
  • 6.12.0-beta.2 - 2021-12-10
  • 6.12.0-beta.1 - 2021-12-04
  • 6.12.0-alpha.1 - 2021-11-19
  • 6.11.0 - 2021-11-18
  • 6.10.0 - 2021-11-18
  • 6.9.0 - 2021-11-01
  • 6.8.0 - 2021-10-24
  • 6.7.0 - 2021-10-09
  • 6.6.5 - 2021-07-06
  • 6.6.4 - 2021-06-26
  • 6.6.2 - 2021-03-23
  • 6.6.1 - 2021-03-22
  • 6.6.0 - 2021-03-21
  • 6.5.1 - 2021-03-14
  • 6.5.0 - 2021-01-27
  • 6.4.0 - 2021-01-18
  • 6.3.5 - 2020-09-01
from sequelize GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade sequelize from 6.3.5 to 6.37.5
29ac2a2
Snyk has created this PR to upgrade sequelize from 6.3.5 to 6.37.5.
See this package in npm:
sequelize
See this project in Snyk:
https://app.snyk.io/org/tizukanji/project/208dc152-1bbe-46e7-9626-6868f959be29?utm_source=github&utm_medium=referral&page=upgrade-pr
@openzeppelin-code

openzeppelin-codeBot commented Jan 23, 2025

Copy link
Copy Markdown

[Snyk] Upgrade sequelize from 6.3.5 to 6.37.5

Generated at commit: 29ac2a29e57caaa011995a3ca5cc31fd8e7e623d

🚨 Report Summary

Severity LevelResults
ContractsCritical
High
Medium
Low
Note
Total		0
0
0
0
0
0
DependenciesCritical
High
Medium
Low
Note
Total		0
0
0
0
0
0

For more details view the full report in OpenZeppelin Code Inspector

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@GLOBAL-FINTECH@snyk-bot