Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
5 matching records.
-
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12, 8.24.3, and 9.9.2, Mongoose countDocuments() does not apply the configured sanitizeFilter query selector…
-
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. From 6.0.0 until 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Mongoose stores the connection-level sanitizeFilter option in Connection.config…
-
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Mongoose can descend into inherited properties while loading database documents in init()…
-
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Schema.prototype.virtual() builds nested virtual paths without applying the…
-
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Mongoose uses attacker-controlled discriminator key values, including the default __t…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Automattic&limit=100. RSS for this section: feed.xml.