~ / search / GHSA-9m93-w8w6-76hh

GHSA-9m93-w8w6-76hh

Mongoose Prototype Pollution vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-3696

Packages

EcosystemPackageAffectedFixed in
npm mongoose >= 7.0.0, < 7.3.3 7.3.3
npm mongoose >= 6.0.0, < 6.11.3 6.11.3
npm mongoose < 5.13.20 5.13.20

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.3, 6.11.3, and 5.13.20.

References

External links from the advisory. They lead to third-party sites.