mongoose vulnerabilities (npm)

9 vulnerabilities.

• mongoose npm Mongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter) CVE-2026-73562 Fix available 6.5 MediumJuly 24, 2026
• mongoose npm Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection CVE-2026-42334 Fix available 7.5 HighMay 5, 2026
• mongoose npm Mongoose search injection vulnerability CVE-2025-23061 Public exploitFix available 9.0 CriticalJanuary 15, 2025
• mongoose npm Mongoose search injection vulnerability CVE-2024-53900 Public exploitFix available 9.1 CriticalDecember 2, 2024
• mongoose npm Prototype Pollution in automattic/mongoose CVE-2023-3696 Fix available 10.0 CriticalJuly 17, 2023
• mongoose npm Mongoose Vulnerable to Prototype Pollution in Schema Object CVE-2022-24304 Fix availableRejected 9.8 CriticalAugust 26, 2022
• mongoose npm Prototype Pollution in automattic/mongoose CVE-2022-2564 Fix available EPSS 31.3% 7.0 HighJuly 28, 2022
• mongoose npm Remote Memory Exposure in mongoose GHSA-r5xw-q988-826m Fix available 5.1 MediumSeptember 1, 2020
• mongoose npm Improper Input Validation in Automattic Mongoose CVE-2019-17426 Fix available 9.1 CriticalOctober 10, 2019