Feather js vulnerabilities
We track 2 vulnerabilities in Feather js products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2022.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Feather js vulnerabilities
- 9.8 Critical severity
Feathers-Sequalize: Improper Neutralization of Special Elements used in an SQL Command
Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.
- 9.8 Critical severity
Feathers-Sequalize: Improperly Controlled Modification of Object Prototype Attributes
Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.