Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2026-42334 Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.9, 7.8.9, 8.22.1, and 9.1.6, a vulnerabilit… Mongoose 6.13.9 / 7.8.9+ Fix from $1,9502026-05-14 CRITICAL 9.8 CVE-2025-23061EPSS 7% Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because… Mongoose 6.13.6 / 7.8.4+ Fix from $2,3002025-01-15 CRITICAL 9.1 CVE-2024-53900 Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. Mongoose 6.13.5 / 7.8.3+ Fix from $2,3002024-12-02 CRITICAL 9.8 CVE-2023-3696 Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4. Mongoose 5.13.20 / 6.11.3+ Fix from $2,3002023-07-17 CRITICAL 9.8 CVE-2022-2564EPSS 33% Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6. Mongoose 5.13.15 / 6.4.6+ Fix from $2,3002022-07-28 CRITICAL 9.1 CVE-2019-17426 Automattic Mongoose through 5.7.4 allows attackers to bypass access control (in some applications) because any query object with a _bsontype attribut… Mongoose after 5.7.4 Fix from $2,3002019-10-10