Known vulnerabilities in Mongoose
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-23061 | Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection | 9.0 Critical | Jan 15, 2025 |
| CVE-2023-3696 | Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4 | 10.0 Critical | Jul 17, 2023 |