feathersjs feathers vulnerabilities
6 published CVEs name feathersjs feathers among the affected products.
- 6Published CVEs6 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54335
Feathersjs: Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__
feathersjs · feathers
Low3.7 - CVE-2026-29792
Feathersjs has an OAuth Callback Account Takeover
feathersjs · feathers
Critical9.3 - CVE-2026-27193
Feathers exposes internal headers via unencrypted session cookie
feathersjs · feathers
High8.2 - CVE-2026-27192
Feathers has an origin validation bypass via prefix matching
feathersjs · feathers
High7.6 - CVE-2026-27191
Feathers: Open Redirect in OAuth callback enables account takeover
feathersjs · feathers
High7.4 - CVE-2023-37899
feathersjs socket handler allows abusing implicit toString
feathersjs · feathers
High7.5