mongoosejs
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Mongoose | 1 | – | Jan 15, 2025 |
Exploited and recent CVEs
- CVE-2025-23061 Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900. 7.2%