Feathersjs

5 CVEs across 2 Feathersjs products. Browse Feathersjs vulnerabilities, severities, and proof-of-concept exploits.

Feathersjs products with known CVEs

ProductCVEs
Feathers7
Feathers-Sequelize3
Feathersjs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54335Low3.72026-07-17Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In 5.0.44 and earlier, the _.merge(target, source) ut…
CVE-2026-29793Critical9.82026-03-10Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, Socket.IO clients can s…
CVE-2026-29792Critical9.82026-03-10Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, an unauthenticated attac…
CVE-2026-27193Medium5.32026-02-21Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, all HTTP request header…
CVE-2026-27192High8.12026-02-21Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.0.39 and below, origin validation uses…
CVE-2026-27191Medium6.12026-02-21Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Versions 5.0.39 and below the redirect query paramete…
CVE-2023-37899High7.52023-07-19Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Feathers socket handler did not catch invalid string…
CVE-2022-2422Critical10.02022-10-26Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-se…
CVE-2022-29823Critical10.02022-10-26Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RC…
CVE-2022-29822Critical10.02022-10-26Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection