feathersjs kayıtları
feathersjs üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
- CWE-346 Origin Validation Error1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-754 Improper Check for Unusual or Exceptional Conditions1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-29823İstismar yok | Feathers - Query “__proto__” is converted to real prototypefeathersjs · feathers-sequelize · CWE-1321 | Kritik9,8 | — | %1,5 | 26 Eki 2022 |
39İzleyin | CVE-2022-29822İstismar yok | Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injectionfeathersjs · feathers-sequelize · CWE-89 | Kritik9,8 | — | %0,8 | 26 Eki 2022 |
39İzleyin | CVE-2022-2422İstismar yok | Feathers - SQL injection via attribute aliasesfeathersjs · feathers-sequelize · CWE-89 | Kritik9,8 | — | %0,8 | 26 Eki 2022 |
37İzleyin | CVE-2026-29792İstismar yok | Feathersjs has an OAuth Callback Account Takeoverfeathersjs · feathers · CWE-287 | Kritik9,3 | — | %0,6 | 10 Mar 2026 |
37İzleyin | CVE-2026-29793İstismar yok | NoSQL Injection via WebSocket id Parameter in MongoDB Adapterfeathersjs · feathers · CWE-943 | Kritik9,3 | — | %0,6 | 10 Mar 2026 |
32İzleyin | CVE-2026-27193İstismar yok | Feathers exposes internal headers via unencrypted session cookiefeathersjs · feathers · CWE-200 | Yüksek8,2 | — | %0,4 | 21 Şub 2026 |
30İzleyin | CVE-2023-37899İstismar yok | feathersjs socket handler allows abusing implicit toStringfeathersjs · feathers · CWE-754 | Yüksek7,5 | — | %1,2 | 19 Tem 2023 |
30İzleyin | CVE-2026-27192İstismar yok | Feathers has an origin validation bypass via prefix matchingfeathersjs · feathers · CWE-346 | Yüksek7,6 | — | %0,3 | 21 Şub 2026 |
29İzleyin | CVE-2026-27191İstismar yok | Feathers: Open Redirect in OAuth callback enables account takeoverfeathersjs · feathers · CWE-601 | Yüksek7,4 | — | %0,3 | 21 Şub 2026 |
- CVE-2022-2982339İzleyin
Feathers - Query “__proto__” is converted to real prototype
KritikCVSS 9,8İstismar yokEPSS %2feathersjs · feathers-sequelize26 Eki 2022
- CVE-2022-2982239İzleyin
Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection
KritikCVSS 9,8İstismar yokEPSS %1feathersjs · feathers-sequelize26 Eki 2022
- CVE-2022-242239İzleyin
Feathers - SQL injection via attribute aliases
KritikCVSS 9,8İstismar yokEPSS %1feathersjs · feathers-sequelize26 Eki 2022
- CVE-2026-2979237İzleyin
Feathersjs has an OAuth Callback Account Takeover
KritikCVSS 9,3İstismar yokEPSS %1feathersjs · feathers10 Mar 2026
- CVE-2026-2979337İzleyin
NoSQL Injection via WebSocket id Parameter in MongoDB Adapter
KritikCVSS 9,3İstismar yokEPSS %1feathersjs · feathers10 Mar 2026
- CVE-2026-2719332İzleyin
Feathers exposes internal headers via unencrypted session cookie
YüksekCVSS 8,2İstismar yokEPSS %0feathersjs · feathers21 Şub 2026
- CVE-2023-3789930İzleyin
feathersjs socket handler allows abusing implicit toString
YüksekCVSS 7,5İstismar yokEPSS %1feathersjs · feathers19 Tem 2023
- CVE-2026-2719230İzleyin
Feathers has an origin validation bypass via prefix matching
YüksekCVSS 7,6İstismar yokEPSS %0feathersjs · feathers21 Şub 2026
- CVE-2026-2719129İzleyin
Feathers: Open Redirect in OAuth callback enables account takeover
YüksekCVSS 7,4İstismar yokEPSS %0feathersjs · feathers21 Şub 2026