Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Feathers CRITICAL 9.8
CVE-2026-29792

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, an unauthentic…

Fix: 5.0.42+
Fix from $2,300 2026-03-10
Feathers CRITICAL 9.8
CVE-2026-29793

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, Socket.IO cli…

Fix: 5.0.42+
Fix from $2,300 2026-03-10
Feathers MEDIUM 5.3
CVE-2026-27193

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, all HTTP requ…

Fix: 5.0.40+
Fix from $1,600 2026-02-21
Feathers HIGH 8.1
CVE-2026-27192

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, origin valida…

Fix: 5.0.40+
Fix from $1,950 2026-02-21
Feathers MEDIUM 6.1
CVE-2026-27191

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Versions 5.0.39 and below the redirect quer…

Fix: 5.0.40+
Fix from $1,600 2026-02-21
Feathers HIGH 7.5
CVE-2023-37899

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Feathers socket handler did not catch inval…

Fix: 4.5.18 / 5.0.8+
Fix from $1,950 2023-07-19
Feathers Sequelize CRITICAL 9.8
CVE-2022-29823

Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Exe…

Fix: 6.3.4+
Fix from $2,300 2022-10-26
Feathers Sequelize CRITICAL 9.8
CVE-2022-2422

Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the f…

Fix: 6.3.4+
Fix from $2,300 2022-10-26
Feathers Sequelize CRITICAL 9.8
CVE-2022-29822

Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

Fix: 6.3.4+
Fix from $2,300 2022-10-26