Browse CVEs

CRITICAL 9.8 CVE-2026-29792 Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, an unauthentic… Feathers 5.0.42+ Fix from $2,3002026-03-10 CRITICAL 9.8 CVE-2026-29793 Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, Socket.IO cli… Feathers 5.0.42+ Fix from $2,3002026-03-10 MEDIUM 5.3 CVE-2026-27193 Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, all HTTP requ… Feathers 5.0.40+ Fix from $1,6002026-02-21 HIGH 8.1 CVE-2026-27192 Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, origin valida… Feathers 5.0.40+ Fix from $1,9502026-02-21 MEDIUM 6.1 CVE-2026-27191 Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Versions 5.0.39 and below the redirect quer… Feathers 5.0.40+ Fix from $1,6002026-02-21 HIGH 7.5 CVE-2023-37899 Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Feathers socket handler did not catch inval… Feathers 4.5.18 / 5.0.8+ Fix from $1,9502023-07-19 CRITICAL 9.8 CVE-2022-29823 Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Exe… Feathers Sequelize 6.3.4+ Fix from $2,3002022-10-26 CRITICAL 9.8 CVE-2022-2422 Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the f… Feathers Sequelize 6.3.4+ Fix from $2,3002022-10-26 CRITICAL 9.8 CVE-2022-29822 Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection Feathers Sequelize 6.3.4+ Fix from $2,3002022-10-26