1237 matches found
PT-2025-47916
Name of the Vulnerable Software and Affected Versions Cesanta Mongoose versions prior to 7.2 Description A flaw exists in Cesanta Mongoose where a null pointer dereference in the add ca certs function can lead to a denial of service. This occurs during TLS initialization when SSL CTX get cert sto...
CVE-2025-65502
Null pointer dereference in addcacerts in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of service via TLS initialization where SSLCTXgetcertstore returns NULL...
CVE-2025-65502
CVE-2025-65502 affects Cesanta Mongoose before 7.2. The root cause is a null pointer dereference in add_ca_certs() during TLS initialization when SSL_CTX_get_cert_store() returns NULL, allowing a remote attacker to cause a denial of service over the network. The vulnerability is documented across...
Malicious code in mongoose-odm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96769a7d9b829c0679f6d50c1f0c7cf119eb49605c5dc6d9b7b1a05c2b655c9 The package mongoose-odm was found to contain malicious code. Source: ghsa-malware f652b1e2a0f5c99554f46ab757d97e6038f7e5cac1d2c51a2a01851b744884f2 A...
Malicious Package
Overview mongoose-odm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-197919
Malicious code in mongoose-odm npm...
MAL-2025-190560 Malicious code in mongoose-odm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96769a7d9b829c0679f6d50c1f0c7cf119eb49605c5dc6d9b7b1a05c2b655c9 The package mongoose-odm was found to contain malicious code. Source: ghsa-malware f652b1e2a0f5c99554f46ab757d97e6038f7e5cac1d2c51a2a01851b744884f2 A...
EUVD-2025-175617
Malicious code in webdriver-manager-cosmos-mongoose-got npm...
EUVD-2025-177765
Malicious code in mongoose-wolf-deimos-forever npm...
EUVD-2025-177766
Malicious code in mongoose-supernova-transhumanism-gulp npm...
Malicious code in framework-umbriel-mongoose-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b42f5a2bf812a423565a8afa97eec03ecb98096dfa30fdb3f61353f872d6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176679
Malicious code in resolvers-forever-mongoose-multiverse npm...
EUVD-2025-178990
Malicious code in exec-supernova-soap-mongoose npm...
EUVD-2025-179043
Malicious code in eslint-config-uninstall-mongoose-superflare npm...
EUVD-2025-178735
Malicious code in genomics-outercore-mongoose-csv npm...
EUVD-2025-177767
Malicious code in mongoose-odin-rimraf-petrology npm...
EUVD-2025-177659
Malicious code in neptune-middleware-mongoose-neptunology npm...
MAL-2025-188755 Malicious code in plutology-sass-loader-mongoose-extremophile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5143ce37789b72ee505bcbf926f1c3450ee28736cce04aeca84e1eb9010bbbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...