Chore: Updating sequelize to v6.10.0

node-casbin / sequelize-adapter

Sequelize adapter for Casbin

https://github.com/casbin/node-casbin

Apache License 2.0

64 stars 34 forks source link

Closed samstefan closed 2 years ago

samstefan commented 2 years ago

This is to fix the security vulnerability CVE-2021-3765 in validator.js < 13.7.0

casbin-bot commented 2 years ago

@Gabriel-403 @Zxilly @kingiw @nodece please review

CLAassistant commented 2 years ago

All committers have signed the CLA.

hsluoyz commented 2 years ago

@samstefan plz fix:

samstefan commented 2 years ago

@hsluoyz I ended up reverting to version Sequelize v6.10.0 as there seems to be quite a lot of breaking changes. The fix for the vulnerability is applied in this commit https://github.com/sequelize/sequelize/commit/d4f7558e6f9e04db52b440399d1d67a8cd46e46c

coveralls commented 2 years ago