23 matches found
CLSA-2026-1785380887 TuxCare security update for mongoose (2 CVEs)
TuxCare rebuilt mongoose to address 2 CVEs. Fixed in 6.12.2-tuxcare.4...
CLSA-2026-1777250310 TuxCare security update for mongoose (1 CVE)
TuxCare rebuilt mongoose to address 1 CVE. Fixed in 6.12.2-tuxcare.2...
CLSA-2026-1774916722 TuxCare security update for mongoose (1 CVE)
TuxCare rebuilt mongoose to address 1 CVE. Fixed in 5.13.23-tuxcare.1...
UBUNTU-CVE-2026-5246
A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mgtlsverifycertsignature of the file mongoose.c of the component P-384 Public Key Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. Attacks of this nature...
CVE-2026-5244 Cesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow
A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mgtlsrecvcert of the file mongoose.c of the component TLS 1.3 Handler. Such manipulation of the argument pubkey leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been...
DEBIAN-CVE-2026-2967
A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...
CVE-2026-24822 a heap-based buffer overflow vulnerability in ttttupup/wxhelper via src/mongoose.
Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttupup wxhelper src modules. This vulnerability is associated with program files mongoose.C. This issue affects wxhelper: through 3.9.10.19-v1...
EUVD-2025-175617
Malicious code in webdriver-manager-cosmos-mongoose-got npm...
EUVD-2025-124762
Malicious code in mongoose-jovian-perseus-polaris npm...
EUVD-2025-115271
Malicious code in cluster-testcafe-chalk-mongoose npm...
EUVD-2018-12911
Malware in sbrugna...
EUVD-2018-12914
Malware in sbrugna...
The vulnerability of the Mongoose library, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary code and gain access to read and modify data.
The vulnerability of the Mongoose library relates to the lack of protection for the SQL query structure when the $where operator is used. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain access to read and modify data...
PT-2025-4802 · Mongoose · Mongoose
Name of the Vulnerable Software and Affected Versions: Mongoose affected versions not specified Description: The Mongoose library is affected by a flaw that exposes millions of downloads to search injection. This issue arises from the improper handling of nested $where filters with populate match...
UBUNTU-CVE-2023-34188
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an attacker can cause an infinite loop in which the server continuously reparses that payload, and does not respond to any other requests...
UBUNTU-CVE-2022-25299
This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mghttpupload method may enable attackers to write files to arbitrary locations outside the designated target folder...
Cesanta Mongoose 缓冲区错误漏洞
Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mgtlsinit function in Cesanta Mongoose 7.0, 6.7-6.18. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...
DEBIAN-CVE-2019-13503
mqparsehttp in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read...