Sailjs · Waterline-Sequel · CVE-2016-10551
**Name of the Vulnerable Software and Affected Versions**
waterline-sequel versions 0.50
**Description**
The issue allows malicious users to input their own SQL statements, which can be executed and provide full access to the database. This occurs when user input is passed into the `like`, `contains`, `startsWith`, or `endsWith` methods in waterline-sequel.
**Recommendations**
Upgrade to at least version 0.5.1