Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-p5m3-27vh-52j4: Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution

Feather-Sequelize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.

ghsa
#git#rce

Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution

Critical severity GitHub Reviewed Published Oct 26, 2022 • Updated Oct 31, 2022

ghsa: Latest News

GHSA-j4rj-fgcq-wmqp: Cockpit - Content Platform vulnerable to XSS through name or email argument names