~ / search / GHSA-qpv8-4pjq-qqh7

GHSA-qpv8-4pjq-qqh7

feathers-sequelize contains improper input validation leading to SQL injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-2422

Packages

EcosystemPackageAffectedFixed in
npm feathers-sequelize >= 6.0.0, < 6.3.4 6.3.4

Details

As written in the advisory (Markdown source, shown as plain text).

Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.

References

External links from the advisory. They lead to third-party sites.