Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
mongoose Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collections Medium Risk 4.8 8 hours ago 8 hours ago
mongoose Mongoose: Prototype pollution via Schema.prototype.virtual() Medium Risk 6.5 8 hours ago 8 hours ago
mongoose Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of service) and shared schema state High Risk 8.2 8 hours ago 8 hours ago
mongoose Mongoose: Connection-level sanitizeFilter not applied High Risk 7.5 9 hours ago 9 hours ago
mongoose Mongoose: sanitizeFilter not applied on countDocuments Critical 9.8 9 hours ago 9 hours ago
@opentelemetry/instrumentation-mongoose Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute Medium Risk 5.8 1 month ago 1 month ago
react-mongoose Malicious code in react-mongoose (npm) Unknown 2 months ago 2 months ago
mongoose Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter) Medium Risk 6.5 3 months ago 2 months ago
mongoose-schema-unique Malicious code in mongoose-schema-unique (npm) Unknown 4 months ago 4 months ago
mongoose-json-format Malicious code in mongoose-json-format (npm) Unknown 4 months ago 4 months ago
mongoose-lean-hooks Malicious code in mongoose-lean-hooks (npm) Unknown 4 months ago 4 months ago
autotel-mongoose Malicious code in autotel-mongoose (npm) Unknown 5 months ago 4 months ago
mongoose-jsonify Malicious code in mongoose-jsonify (npm) Unknown 4 months ago 4 months ago
mongoose Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection High Risk 7.5 6 months ago 5 months ago
mongoose-stamps Malicious code in mongoose-stamps (npm) Unknown 7 months ago 6 months ago
database-mongoose-kit Malicious code in database-mongoose-kit (npm) Unknown 11 months ago 7 months ago
mongoose-apis Malicious code in mongoose-apis (npm) Unknown 8 months ago 8 months ago
mongoose_update Malicious code in mongoose_update (npm) Unknown 9 months ago 9 months ago
mongoose Mongoose search injection vulnerability Critical 9.8 1 year ago 9 months ago
MongooseIM Erlang Solutions MongooseIM vulnerable to denial of service (DoS) via crafted XMPP stream High Risk 8.0 4 years ago 11 months ago
atrix-mongoose Malicious code in atrix-mongoose (npm) Unknown 11 months ago 11 months ago
@trigo/atrix-mongoose Malicious code in @trigo/atrix-mongoose (npm) Unknown 11 months ago 11 months ago
mongoose-odm Malicious code in mongoose-odm (npm) Unknown 11 months ago 11 months ago
centaurus-biohacking-mongoose-nova Malicious code in centaurus-biohacking-mongoose-nova (npm) Unknown 12 months ago 12 months ago
chakra-ui-levels-mdx-mongoose Malicious code in chakra-ui-levels-mdx-mongoose (npm) Unknown 12 months ago 12 months ago
configstore-mongoose-interferometry-terser-webpack-plugin Malicious code in configstore-mongoose-interferometry-terser-webpack-plugin (npm) Unknown 12 months ago 12 months ago
eslint-config-uninstall-mongoose-superflare Malicious code in eslint-config-uninstall-mongoose-superflare (npm) Unknown 12 months ago 12 months ago
exec-local-mongoose-dione Malicious code in exec-local-mongoose-dione (npm) Unknown 12 months ago 12 months ago
exec-supernova-soap-mongoose Malicious code in exec-supernova-soap-mongoose (npm) Unknown 12 months ago 12 months ago
farout-mongoose-process-kronos Malicious code in farout-mongoose-process-kronos (npm) Unknown 12 months ago 12 months ago
framework-umbriel-mongoose-magellan Malicious code in framework-umbriel-mongoose-magellan (npm) Unknown 12 months ago 12 months ago
genomics-outercore-mongoose-csv Malicious code in genomics-outercore-mongoose-csv (npm) Unknown 12 months ago 12 months ago
iota-hugo-mongoose-hapi Malicious code in iota-hugo-mongoose-hapi (npm) Unknown 12 months ago 12 months ago
loglevel-selenium-process-mongoose Malicious code in loglevel-selenium-process-mongoose (npm) Unknown 12 months ago 12 months ago
lyra-cryovolcano-mongoose-multiverse Malicious code in lyra-cryovolcano-mongoose-multiverse (npm) Unknown 12 months ago 12 months ago
mongoose-convict-kaus-thermochronology Malicious code in mongoose-convict-kaus-thermochronology (npm) Unknown 12 months ago 12 months ago
mongoose-cordelia-hawkingradiation-antares Malicious code in mongoose-cordelia-hawkingradiation-antares (npm) Unknown 12 months ago 12 months ago
mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius (npm) Unknown 12 months ago 12 months ago
mongoose-docusaurus-fomalhaut-oauth Malicious code in mongoose-docusaurus-fomalhaut-oauth (npm) Unknown 12 months ago 12 months ago
mongoose-electron-bunyan-event Malicious code in mongoose-electron-bunyan-event (npm) Unknown 12 months ago 12 months ago
mongoose-odin-rimraf-petrology Malicious code in mongoose-odin-rimraf-petrology (npm) Unknown 12 months ago 12 months ago
mongoose-supernova-transhumanism-gulp Malicious code in mongoose-supernova-transhumanism-gulp (npm) Unknown 12 months ago 12 months ago
mongoose-wolf-deimos-forever Malicious code in mongoose-wolf-deimos-forever (npm) Unknown 12 months ago 12 months ago
neptune-middleware-mongoose-neptunology Malicious code in neptune-middleware-mongoose-neptunology (npm) Unknown 12 months ago 12 months ago
phoebe-stop-mongoose-gatsby Malicious code in phoebe-stop-mongoose-gatsby (npm) Unknown 12 months ago 12 months ago
plutology-sass-loader-mongoose-extremophile Malicious code in plutology-sass-loader-mongoose-extremophile (npm) Unknown 12 months ago 12 months ago
proxima-spawn-mongoose-brane Malicious code in proxima-spawn-mongoose-brane (npm) Unknown 12 months ago 12 months ago
radioastronomy-mongoose-inquirer-hyperion Malicious code in radioastronomy-mongoose-inquirer-hyperion (npm) Unknown 12 months ago 12 months ago
resolvers-forever-mongoose-multiverse Malicious code in resolvers-forever-mongoose-multiverse (npm) Unknown 12 months ago 12 months ago
scripts-duplex-innercore-mongoose Malicious code in scripts-duplex-innercore-mongoose (npm) Unknown 12 months ago 12 months ago