- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 critical
- Registry
- npm
Advisories 3
- CVE-2022-29823Critical 10.0
Feathers - Query “proto” is converted to real prototype
Affected: from 6.0.0, fixed in 6.3.3.
- CVE-2022-29822Critical 10.0
Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection
Affected: from 6.0.0, fixed in 6.3.4.
- CVE-2022-2422Critical 10.0
Feathers - SQL injection via attribute aliases
Affected: from 6.0.0, fixed in 6.3.4.