Headline
GHSA-p5m3-27vh-52j4: Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution
Feather-Sequelize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution (RCE) with privileges of application.
Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution
Critical severity GitHub Reviewed Published Oct 26, 2022 • Updated Oct 31, 2022