Skip to content
OpenAdvisories

Package · npm

feathers-sequelize

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 10.0
    CVE-2022-29823

    Feathers - Query “__proto__” is converted to real prototype

    Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.

    Feather js Feathers-Sequalize feathers-sequelize npm
  • Critical 10.0
    CVE-2022-29822

    Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

    Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

    Feather js Feathers-Sequalize feathers-sequelize npm
  • Critical 10.0
    CVE-2022-2422

    Feathers - SQL injection via attribute aliases

    Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.

    Feather js Feathers-Sequalize feathers-sequelize npm