~ / search / GHSA-m2r3-8492-vx59

GHSA-m2r3-8492-vx59

Denial of Service (DoS) in mongo-express

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23372

Packages

EcosystemPackageAffectedFixed in
npm mongo-express <= 0.54.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash.

References

External links from the advisory. They lead to third-party sites.