1187 matches found
Malicious code in mongoose-tokens (npm)
The package mongoose-tokens was found to contain malicious code...
Malicious code in native-mongoose-hyperion-levels (npm)
The package native-mongoose-hyperion-levels was found to contain malicious code...
Malicious code in sagitta-mongoose-gravitationalwave-postcss-loader (npm)
The package sagitta-mongoose-gravitationalwave-postcss-loader was found to contain malicious code...
Malicious code in netgate-mongoose (npm)
The package netgate-mongoose was found to contain malicious code...
Malicious code in mongoose-vega-multiverse-local (npm)
The package mongoose-vega-multiverse-local was found to contain malicious code...
Malicious code in humanapi-mongoose-list (npm)
The package humanapi-mongoose-list was found to contain malicious code...
Malicious code in subduction-mira-scripts-mongoose (npm)
The package subduction-mira-scripts-mongoose was found to contain malicious code...
MAL-2025-32632 Malicious code in sagitta-mongoose-gravitationalwave-postcss-loader (npm)
The package sagitta-mongoose-gravitationalwave-postcss-loader was found to contain malicious code...
MAL-2025-23681 Malicious code in javascript-astrochemistry-panspermia-mongoose (npm)
The package javascript-astrochemistry-panspermia-mongoose was found to contain malicious code...
MAL-2025-34665 Malicious code in telesto-betelgeuse-mongoose-magellan (npm)
The package telesto-betelgeuse-mongoose-magellan was found to contain malicious code...
MAL-2025-27310 Malicious code in netgate-mongoose (npm)
The package netgate-mongoose was found to contain malicious code...
MAL-2025-5507 Malicious code in node-orm-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 865f8ea25ee366ddf039c3cc4048e0974b55b5cfda34aaf8679f705a5ebc5432 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in node-orm-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 865f8ea25ee366ddf039c3cc4048e0974b55b5cfda34aaf8679f705a5ebc5432 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: Mongoose Improper Handling of Nested $where in populate() Match Allows Search Injection
Summary Mongoose improper handling of nested $where in populate match allows search injection due to incomplete fix for CVE-2024-53900. Vulnerability Details CVEID:CVE-2025-23061 DESCRIPTION: Mongoose before 8.9.5 can improperly use a nested $where filter with a populate match, leading to search...
MAL-2025-5085 Malicious code in mongoose-lite (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mongoose-lite (npm)
--- -= Per source details. Do not edit below this line.=-...
📄 Mongoose HTTP Denial of Service
Mongoose HTTP versions prior to 7.14 appear to suffer from a basic resource exhaustion denial of service vulnerability. Exploit Title: Mongoose HTTP 7.14 DDOS Stack-Based Free Discovered by: Yehia Elghaly Discovered Date: 2025-06-11 Vendor Homepage: https://mongoose.ws/ Software Link :...
CVE-2024-42388
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...
CVE-2024-42389
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...