Skip to content

Product

feathersjs mongodb vulnerabilities

1 published CVE affecting feathersjs mongodb, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest feathersjs mongodb CVEs

Newest publication first

  1. CVE-2026-29793 NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

    Published
    CriticalCVSS 9.3 EPSS 0.51%

    Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. From 5.0.0 to before 5.0.42, Socket.IO clients can send arbitrary JavaScript objects as the id argument to any service method (get, patch, update, remove). The transport laye...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.