{"id":"GHSA-r5xw-q988-826m","aliases":[],"status":"published","title":"Remote Memory Exposure in mongoose","description":"Versions of `mongoose` before 4.3.6, 3.8.39 are vulnerable to remote memory exposure.\n\nTrying to save a number to a field of type Buffer on the affected mongoose versions allocates a chunk of uninitialized memory and stores it in the database.\n\n\n## Recommendation\n\nUpdate to version 4.3.6, 3.8.39 or later.","severity":{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-201"],"published":"2020-09-01T19:39:37Z","modified":"2023-12-07T22:05:31Z","fixes":[{"ecosystem":"npm","package":"mongoose","fixed_in":["3.8.39","4.3.6"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"mongoose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5.5"},{"last_affected":"3.8.38"},{"fixed":"3.8.39"}]}]},{"source":"ghsa","ecosystem":"npm","package":"mongoose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"last_affected":"4.3.5"},{"fixed":"4.3.6"}]}]},{"source":"osv","ecosystem":"npm","package":"mongoose","ranges":[{"type":"SEMVER","events":[{"introduced":"3.5.5"},{"fixed":"3.8.39"}]}]},{"source":"osv","ecosystem":"npm","package":"mongoose","ranges":[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.3.6"}]}]}],"references":[{"url":"https://github.com/Automattic/mongoose/issues/3764","tags":["web"]},{"url":"https://gist.github.com/ChALkeR/440bc3dfcbd9b6da75c3","tags":["web"]},{"url":"https://gist.github.com/ChALkeR/d4a8055625221b6e65f0","tags":["web"]},{"url":"https://www.npmjs.com/advisories/599","tags":["web"]},{"url":"https://github.com/advisories/GHSA-r5xw-q988-826m"}],"sources":{"ghsa":[{"id":"GHSA-r5xw-q988-826m","title":"Remote Memory Exposure in mongoose","description":"Versions of `mongoose` before 4.3.6, 3.8.39 are vulnerable to remote memory exposure.\n\nTrying to save a number to a field of type Buffer on the affected mongoose versions allocates a chunk of uninitialized memory and stores it in the database.\n\n\n## Recommendation\n\nUpdate to version 4.3.6, 3.8.39 or later.","status":"published","published":"2020-09-01T19:39:37Z","modified":"2023-12-07T22:05:31Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:37:24.593982Z"}],"osv":[{"id":"GHSA-r5xw-q988-826m","title":"Remote Memory Exposure in mongoose","description":"Versions of `mongoose` before 4.3.6, 3.8.39 are vulnerable to remote memory exposure.\n\nTrying to save a number to a field of type Buffer on the affected mongoose versions allocates a chunk of uninitialized memory and stores it in the database.\n\n\n## Recommendation\n\nUpdate to version 4.3.6, 3.8.39 or later.","status":"published","published":"2020-09-01T19:39:37Z","modified":"2023-12-07T22:05:28Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T15:46:55.480549Z"}]}}