Thomas Rinsma (Codean)

Sequalize - Default support for “raw attributes” when using parentheses

Sequalize - Bad query filtering leading to SQL errors

Sequalize - Unsafe fall-through in getWhereConditions

Feathers - SQL injection via attribute aliases

Socket.io - Improper type validation in attachment parsing

Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

Feathers - Query “__proto__” is converted to real prototype