Skip to content
OpenAdvisories

Package · npm

@feathersjs/mongodb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2026-29793

    NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

    Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, Socket.IO clients can send arbitrary JavaScript objects as the id argument to any service method (get, patch, update, remove…

    feathersjs mongodb @feathersjs/mongodb npm