Sequelize version 5 prior to 5.3.0 does not properly ensure that standard conforming strings are used.
sequelizejs sequelize