[Snyk] Upgrade sequelize from 6.25.3 to 6.37.3

[denizd1]

Snyk has created this PR to upgrade sequelize from 6.25.3 to 6.37.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 29 versions ahead of your current version.

• The recommended version was released on 5 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Directory Traversal SNYK-JS-MOMENT-2440688	589	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	589	Proof of Concept
	Improper Filtering of Special Elements SNYK-JS-SEQUELIZE-3324088	589	No Known Exploit
	Prototype Pollution SNYK-JS-DOTTIE-3332763	589	Proof of Concept
	Information Exposure SNYK-JS-SEQUELIZE-3324089	589	No Known Exploit
	Access of Resource Using Incompatible Type ('Type Confusion') SNYK-JS-SEQUELIZE-3324090	589	No Known Exploit

Release notes

Package name: sequelize

• 6.37.3 - 2024-04-13
  

  6.37.3 (2024-04-13)

  Bug Fixes

  • postgres: use schema for foreign key constrains of a table (#17099) (6aba382)
• 6.37.2 - 2024-03-29
  

  6.37.2 (2024-03-29)

  Bug Fixes

  • add readOnly to the transaction options types and docs (#17226) (7c8972f)
• 6.37.1 - 2024-02-18
  

  6.37.1 (2024-02-18)

  Bug Fixes

  • types: Add definition of returning in SaveOptions. (#16954) (505467b)
• 6.37.0 - 2024-02-11
  

  6.37.0 (2024-02-11)

  Features

  • postgres: support connectionTimeoutMillis dialectOption (#14119) (e81200e)
• 6.36.0 - 2024-02-02
• 6.35.2 - 2023-12-11
• 6.35.1 - 2023-11-19
• 6.35.0 - 2023-11-12
• 6.34.0 - 2023-11-03
• 6.33.0 - 2023-09-08
• 6.32.1 - 2023-06-17
• 6.32.0 - 2023-06-01
• 6.31.1 - 2023-05-01
• 6.31.0 - 2023-04-09
• 6.30.0 - 2023-03-24
• 6.29.3 - 2023-03-10
• 6.29.2 - 2023-03-09
• 6.29.1 - 2023-03-07
• 6.29.0 - 2023-02-23
• 6.28.2 - 2023-02-22
• 6.28.1 - 2023-02-21
• 6.28.0 - 2022-12-20
• 6.27.0 - 2022-12-12
• 6.26.0 - 2022-11-29
• 6.25.8 - 2022-11-22
• 6.25.7 - 2022-11-19
• 6.25.6 - 2022-11-15
• 6.25.5 - 2022-11-07
• 6.25.4 - 2022-11-05
• 6.25.3 - 2022-10-19

from sequelize GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"sequelize","from":"6.25.3","to":"6.37.3"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-MOMENT-2440688","issue_id":"SNYK-JS-MOMENT-2440688","priority_score":589,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Directory Traversal"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-MOMENT-2944238","issue_id":"SNYK-JS-MOMENT-2944238","priority_score":696,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Regular Expression Denial of Service (ReDoS)"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-SEQUELIZE-3324088","issue_id":"SNYK-JS-SEQUELIZE-3324088","priority_score":629,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"8.3","score":415},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Improper Filtering of Special Elements"},{"exploit_maturity":"proof-of-concept","id":"SNYK-JS-DOTTIE-3332763","issue_id":"SNYK-JS-DOTTIE-3332763","priority_score":696,"priority_score_factors":[{"type":"exploit","label":"Proof of Concept","score":107},{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"7.5","score":375},{"type":"scoreVersion","label":"v1","score":1}],"severity":"high","title":"Prototype Pollution"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-SEQUELIZE-3324089","issue_id":"SNYK-JS-SEQUELIZE-3324089","priority_score":479,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"5.3","score":265},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Information Exposure"},{"exploit_maturity":"no-known-exploit","id":"SNYK-JS-SEQUELIZE-3324090","issue_id":"SNYK-JS-SEQUELIZE-3324090","priority_score":529,"priority_score_factors":[{"type":"fixability","label":true,"score":214},{"type":"cvssScore","label":"6.3","score":315},{"type":"scoreVersion","label":"v1","score":1}],"severity":"medium","title":"Access of Resource Using Incompatible Type ('Type Confusion')"}],"prId":"02a4b406-9ab9-4ba7-ac31-1be72e059de4","prPublicId":"02a4b406-9ab9-4ba7-ac31-1be72e059de4","packageManager":"npm","priorityScoreList":[589,696,629,696,479,529],"projectPublicId":"f2a9e201-497d-447c-aed1-995eee10fae5","projectUrl":"https://app.snyk.io/org/denizd1/project/f2a9e201-497d-447c-aed1-995eee10fae5?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-MOMENT-2440688","SNYK-JS-MOMENT-2944238","SNYK-JS-SEQUELIZE-3324088","SNYK-JS-DOTTIE-3332763","SNYK-JS-SEQUELIZE-3324089","SNYK-JS-SEQUELIZE-3324090"],"upgradeInfo":{"versionsDiff":29,"publishedDate":"2024-04-13T20:54:25.674Z"},"vulns":["SNYK-JS-MOMENT-2440688","SNYK-JS-MOMENT-2944238","SNYK-JS-SEQUELIZE-3324088","SNYK-JS-DOTTIE-3332763","SNYK-JS-SEQUELIZE-3324089","SNYK-JS-SEQUELIZE-3324090"]}'