5 matches found
EUVD-2022-7026
Malicious code in bioql PyPI...
GHSA-5HQ7-J5WQ-P227 feathers-sequelize vulnerable to SQL injection due to improper parameter filtering
feathers-sequelize is vulnerable to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection...
CVE-2022-29822
Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection...
Sql injection
Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection...
CVE-2022-2422
CVE-2022-2422 describes a SQL injection in Feathers.js when using feathers-sequelize, caused by improper input validation in the library. Reports from multiple sources (NVD, Veracode, GHSA, OSV, CVE list) indicate a high/critical impact with potential remote exploitation via standard network vect...