Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collections | Medium Risk 4.8 | 8 hours ago | 8 hours ago |
|
|
Mongoose: Prototype pollution via Schema.prototype.virtual() | Medium Risk 6.5 | 8 hours ago | 8 hours ago |
|
|
Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of service) and shared schema state | High Risk 8.2 | 8 hours ago | 8 hours ago |
|
|
Mongoose: Connection-level sanitizeFilter not applied | High Risk 7.5 | 9 hours ago | 9 hours ago |
|
|
Mongoose: sanitizeFilter not applied on countDocuments | Critical 9.8 | 9 hours ago | 9 hours ago |
|
|
Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute | Medium Risk 5.8 | 1 month ago | 1 month ago |
|
|
Malicious code in react-mongoose (npm) | Unknown | 2 months ago | 2 months ago |
|
|
Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter) | Medium Risk 6.5 | 3 months ago | 2 months ago |
|
|
Malicious code in mongoose-schema-unique (npm) | Unknown | 4 months ago | 4 months ago |
|
|
Malicious code in mongoose-json-format (npm) | Unknown | 4 months ago | 4 months ago |
|
|
Malicious code in mongoose-lean-hooks (npm) | Unknown | 4 months ago | 4 months ago |
|
|
Malicious code in autotel-mongoose (npm) | Unknown | 5 months ago | 4 months ago |
|
|
Malicious code in mongoose-jsonify (npm) | Unknown | 4 months ago | 4 months ago |
|
|
Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection | High Risk 7.5 | 6 months ago | 5 months ago |
|
|
Malicious code in mongoose-stamps (npm) | Unknown | 7 months ago | 6 months ago |
|
|
Malicious code in database-mongoose-kit (npm) | Unknown | 11 months ago | 7 months ago |
|
|
Malicious code in mongoose-apis (npm) | Unknown | 8 months ago | 8 months ago |
|
|
Malicious code in mongoose_update (npm) | Unknown | 9 months ago | 9 months ago |
|
|
Mongoose search injection vulnerability | Critical 9.8 | 1 year ago | 9 months ago |
MongooseIM
|
Erlang Solutions MongooseIM vulnerable to denial of service (DoS) via crafted XMPP stream | High Risk 8.0 | 4 years ago | 11 months ago |
|
|
Malicious code in atrix-mongoose (npm) | Unknown | 11 months ago | 11 months ago |
|
|
Malicious code in @trigo/atrix-mongoose (npm) | Unknown | 11 months ago | 11 months ago |
|
|
Malicious code in mongoose-odm (npm) | Unknown | 11 months ago | 11 months ago |
|
|
Malicious code in centaurus-biohacking-mongoose-nova (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in chakra-ui-levels-mdx-mongoose (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in configstore-mongoose-interferometry-terser-webpack-plugin (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in eslint-config-uninstall-mongoose-superflare (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in exec-local-mongoose-dione (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in exec-supernova-soap-mongoose (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in farout-mongoose-process-kronos (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in framework-umbriel-mongoose-magellan (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in genomics-outercore-mongoose-csv (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in iota-hugo-mongoose-hapi (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in loglevel-selenium-process-mongoose (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in lyra-cryovolcano-mongoose-multiverse (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in mongoose-convict-kaus-thermochronology (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in mongoose-cordelia-hawkingradiation-antares (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in mongoose-docusaurus-fomalhaut-oauth (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in mongoose-electron-bunyan-event (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in mongoose-odin-rimraf-petrology (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in mongoose-supernova-transhumanism-gulp (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in mongoose-wolf-deimos-forever (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in neptune-middleware-mongoose-neptunology (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in phoebe-stop-mongoose-gatsby (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in plutology-sass-loader-mongoose-extremophile (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in proxima-spawn-mongoose-brane (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in radioastronomy-mongoose-inquirer-hyperion (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in resolvers-forever-mongoose-multiverse (npm) | Unknown | 12 months ago | 12 months ago |
|
|
Malicious code in scripts-duplex-innercore-mongoose (npm) | Unknown | 12 months ago | 12 months ago |
Page 1