Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-p5m3-27vh-52j4: Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution

Feather-Sequelize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.

ghsa
#git#rce

Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution

Critical severity GitHub Reviewed Published Oct 26, 2022 • Updated Oct 31, 2022

ghsa: Latest News

GHSA-5jfw-gq64-q45f: HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through