Skip to content
OpenAdvisories

Product · feathersjs

mongodb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-29793

    NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

    Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, Socket.IO clients can send arbitrary JavaScript objects as the id argument to any service method (get, patch, update, remove…

    feathersjs mongodb @feathersjs/mongodb npm