Feathers-sequelize vulnerabilities

2 known vulnerabilities in Feathers-sequelize from Feathersjs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Feathers-Sequalize: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-2422Oct 26, 2022Feather js

  Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.

• 9.8 Critical severity

  Feathers-Sequalize: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2022-29823Oct 26, 2022Feather jsEPSS 1.88%

  Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.