Description
Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection
Remediation
References
https://csirt.divd.nl/CVE-2022-29822/
https://csirt.divd.nl/DIVD-2022-00020
Related Vulnerabilities
CVE-2022-24802 Vulnerability in npm package deepmerge-ts
CVE-2020-5259 Vulnerability in maven package org.webjars.bowergithub.dojo:dojox
CVE-2019-15658 Vulnerability in npm package connect-pg-simple
CVE-2022-25921 Vulnerability in npm package morgan-json
CVE-2022-39322 Vulnerability in npm package @keystone-6/core