Due to improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection
CWE-89, CWE-89