{"api_version":"v1","generated_at":"2026-10-06T21:45:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-sequelize-sequelize-c8598e945388","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/sequelize","name":"sequelize","next_cursor":null,"observations":[{"affected":"< 6.37.4","affected_versions_present":true,"cve_id":"CVE-2026-69240","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-69240","fixed":"6.37.4.","last_modified":"2026-08-04T14:12:28.199Z","patch_url":"https://github.com/sequelize/sequelize/security/advisories/GHSA-v8fg-2rw7-q452","primary_source":"","published":"2026-08-03T20:28:28.522Z"},{"affected":">= 6.0.0-beta.1, < 6.37.8","affected_versions_present":true,"cve_id":"CVE-2026-30951","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-30951","fixed":"For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.","last_modified":"2026-08-20T12:31:50.041Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-30951","primary_source":"","published":"2026-03-10T20:22:46.150Z"},{"affected":"< 6.19.1","affected_versions_present":true,"cve_id":"CVE-2023-25813","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-25813","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-10T21:07:11.770Z","patch_url":"https://github.com/sequelize/sequelize/commit/ccaa3996047fe00048d5993ab2dd43ebadd4f78b","primary_source":"","published":"2023-02-22T18:14:44.579Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"sequelize"}}