mongoose vulnerabilities (Root)

4 vulnerabilities.

• mongoose Root Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection CVE-2026-42334 Fix available 7.5 HighMay 5, 2026
• mongoose Root Mongoose search injection vulnerability CVE-2025-23061 Public exploitFix available 9.0 CriticalJanuary 15, 2025
• mongoose Root Mongoose search injection vulnerability CVE-2024-53900 Public exploitFix available 9.1 CriticalDecember 2, 2024
• mongoose Root Prototype Pollution in automattic/mongoose CVE-2023-3696 Fix available 10.0 CriticalJuly 17, 2023