| Package | Affected versions | Patched versions |
|---|---|---|
| feathers-sequelize | ≥ 6.0.0, < 6.3.4 | 6.3.4 |
| feathers-sequelize | ≥ 6.0.0, < 6.3.3 | 6.3.3 |
Feather-Sequelize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free