All Versions
71
Latest Version
Avg Release Cycle
17 days
Latest Release
1332 days ago
Changelog History
Page 6
Changelog History
Page 6
-
v5.17.0 Changes
August 28, 2019 -
v5.16.0 Changes
August 22, 2019 -
v5.15.2 Changes
August 21, 2019 -
v5.15.1 Changes
August 18, 20195.15.1 (2019-08-18)
๐ Security
๐ This fixes a security issue with
sequelize.json()
for MySQL. Old code was still used for formatting sub paths for json queries when used withsequelize.json()
helper functionExample of attack vector
return User.findAll({ where: this.sequelize.json("data.id')) AS DECIMAL) = 1 DELETE YOLO INJECTIONS; -- ", 1) });
๐ Thanks to @Kirill89 from Snyk Security Research Team for reporting this issue.
-
v5.15.0 Changes
August 14, 2019 -
v5.14.0 Changes
August 13, 2019 -
v5.13.1 Changes
August 11, 2019 -
v5.12.3 Changes
August 04, 2019 -
v5.12.2 Changes
July 31, 2019