Known vulnerabilities in Automattic mongoose
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-73562 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment | 6.5 Medium | Aug 13, 2026 |
| CVE-2026-42334 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment | 7.5 High | May 14, 2026 |
| CVE-2024-53900 | Mongoose before 8.8.3 can improperly use $where in match, leading to search injection | 9.1 Critical | Dec 2, 2024 |