1187 matches found
Mongoose 安全漏洞
Mongoose is a MongoDB object modeling designed to work in an asynchronous environment. Mongoose suffers from a buffer overflow vulnerability that stems from a boundary error when the application processes untrusted input, which can be exploited by an attacker to cause an application crash or buff...
CVE-2025-51495
An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow...
CVE-2025-51495
An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow...
BIT-MONGOOSE-2025-23061
Mongoose before 8.9.5 can improperly use a nested $where filter with a populate match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900...
Linux Distros Unpatched Vulnerability : CVE-2022-25299
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mghttpupload method may enable attackers to write...
Malicious code in dotenv-parse-variables-cluster-mongoose-xanthus (npm)
The package dotenv-parse-variables-cluster-mongoose-xanthus was found to contain malicious code...
Malicious code in wezen-kastra-yakutsk-mongoose (npm)
The package wezen-kastra-yakutsk-mongoose was found to contain malicious code...
Malicious code in scripts-lint-staged-cygnus-mongoose (npm)
The package scripts-lint-staged-cygnus-mongoose was found to contain malicious code...
Malicious code in mongoose-quark-configstore-dotenv (npm)
The package mongoose-quark-configstore-dotenv was found to contain malicious code...
MAL-2025-45979 Malicious code in scripts-lint-staged-cygnus-mongoose (npm)
The package scripts-lint-staged-cygnus-mongoose was found to contain malicious code...
MAL-2025-46122 Malicious code in spectron-mini-css-extract-plugin-mongoose-indus (npm)
The package spectron-mini-css-extract-plugin-mongoose-indus was found to contain malicious code...
MAL-2025-44051 Malicious code in dotenv-parse-variables-cluster-mongoose-xanthus (npm)
The package dotenv-parse-variables-cluster-mongoose-xanthus was found to contain malicious code...
MAL-2025-45231 Malicious code in mongoose-helmet-procyon-native (npm)
The package mongoose-helmet-procyon-native was found to contain malicious code...
MAL-2025-46612 Malicious code in wezen-kastra-yakutsk-mongoose (npm)
The package wezen-kastra-yakutsk-mongoose was found to contain malicious code...
MAL-2025-43754 Malicious code in chai-leda-pavo-mongoose (npm)
The package chai-leda-pavo-mongoose was found to contain malicious code...
Malicious code in ionosphere-ursa-asthenosphere-mongoose (npm)
The package ionosphere-ursa-asthenosphere-mongoose was found to contain malicious code...
Malicious code in spectron-mini-css-extract-plugin-mongoose-indus (npm)
The package spectron-mini-css-extract-plugin-mongoose-indus was found to contain malicious code...
Malicious code in chai-leda-pavo-mongoose (npm)
The package chai-leda-pavo-mongoose was found to contain malicious code...