Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-2422

Feathers - SQL injection via attribute aliases

Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Feathersjs
Products
Feathers-sequelize
CVE-2022-29822

Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Feathersjs
Products
Feathers-sequelize
CVE-2022-29823

Feathers - Query “__proto__” is converted to real prototype

Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.

CVSS 3.1 · 10 Critical EPSS 1.9% KEV · Not listed
Vendors
Feathersjs
Products
Feathers-sequelize