~/products/seal-security/mongoose-fixed

pipeline liveDigest Docs

Seal-Security Mongoose-Fixed vulnerabilities

1 known vulnerability affecting seal-security/mongoose-fixed.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2023-3696P3CRITICALCVSS 9.1≥ 5.3.3, < 5.3.42023-10-17

CVE-2023-3696 [CRITICAL] CWE-1321 Prototype Pollution in ali-security/mongoose Prototype Pollution in ali-security/mongoose ### Impact This vulnerability causes a Prototype Pollution in document.js, through functions such as findByIdAndUpdate(). For applications using Express and EJS, this can potentially allow remote code execution. ### Patches The original patched version for mongoose 5.3.3 did not include a fix for CVE-2023-3696. Therefore the existing version @seal-security/mongoose-fixed

Seal-Security Mongoose-Fixed vulnerabilities | cvebase