Products: 1
Vulnerabilities: 6
Known Exploited: 0
5
Critical Level Threats
1
High Level Threats
0
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-42334
Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection
Last Modified: May 15, 2026
Published: May 14, 2026
CVE-2025-23061
Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900.
Last Modified: Oct 31, 2025
Published: Jan 15, 2025
CVE-2024-53900
Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.
Last Modified: Oct 01, 2025
Published: Dec 02, 2024
CVE-2023-3696
Prototype Pollution in automattic/mongoose
Last Modified: Nov 21, 2024
Published: Jul 17, 2023
CVE-2022-2564
Prototype Pollution in automattic/mongoose
Last Modified: Nov 21, 2024
Published: Jul 28, 2022
Items Per Page
