GHSA-qpv8-4pjq-qqh7CriticalCVSS 9.8

feathers-sequelize contains improper input validation leading to SQL injection

Published
October 26, 2022
Last Modified
March 31, 2023

🔗 CVE IDs covered (1)

CVE-2022-2422 →

📋 Description

Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.

🎯 Affected products1

  • npm/feathers-sequelize:>= 6.0.0, < 6.3.4

🔗 References (7)