Vulners
Lucene search
2 matches found
CVE-2026-16266
Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey function in util.js. An attacker can modify the JavaScript prototype chain by supplying a crafted property path containing special keys such as proto...
6.3CVSS0.00247EPSS
SaveExploits0References4
CVE-2026-16266
Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey function in util.js. An attacker can modify the JavaScript prototype chain by supplying a crafted property path containing special keys such as proto...
6.3CVSS5.5AI score0.00247EPSS
SaveExploits0References6
20