Skip to content
OpenAdvisories

Vendor

feathersjs

7 known vulnerabilities.

Products

feathers 6 authentication-oauth 1 mongodb 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-54335

    Feathersjs: Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__

    Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In 5.0.44 and earlier, the _.merge(target, source) utility exported by @feathersjs/commons recursively merges source into target by iterating Object.keys…

    feathersjs feathers @feathersjs/commons npm