📦 Feathers

FeathersJS versions 5.0.39 and below have an origin validation vulnerability where the getAllowedOrigin() function uses startsWith() for comparison, allowing attackers to bypass CORS/CSRF protections ...

Feathers.js Socket.io handler contains an uncaught exception vulnerability where specially crafted messages with invalid toString methods can crash the Node.js process. This affects all Feathers.js ap...