mongoosejs
1 Product
2 CVEs
CVE Severity Distribution (All Time)
Critical
High
Medium
Low
Timeline Overview
Last 30 Days
0 CVEs
Last 6 Months
0 CVEs
Last Year
1 CVE
Products
View allRecent CVEs
Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because…