feathersjs Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by feathersjs

JSON RSS CSV 🔔 Create Alert Trigger

10 March 2026

Arbitrary Object Injection in Feathersjs Framework by Socket.IO Clients
CVE-2026-29793
@feathersjsMongodb9.3CRITICAL
OAuth Vulnerability in Feathersjs Framework Affecting Web API Development
CVE-2026-29792
FeathersjsFeathers9.3CRITICAL

21 February 2026

Session Cookie Exposure in Feathersjs Framework Versions
CVE-2026-27193
FeathersjsFeathers8.2HIGH
Origin Validation Bypass in Feathersjs Framework by Feathersjs
CVE-2026-27192
FeathersjsFeathers7.6HIGH
Web API Framework Vulnerability in Feathersjs Affects User Access Security
CVE-2026-27191
FeathersjsFeathers7.4HIGH

19 July 2023

feathersjs socket handler allows abusing implicit toString
CVE-2023-37899
feathersjsfeathers7.5HIGH