CVE-2022-2422: Feathersjs Feathers-Sequelize

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used.

Affected products

• Feathersjs Feathers-Sequelize: from 6.0.0, before 6.3.4 (fixed in 6.3.4)

Published 2022-10-26. Last modified 2026-06-17.