Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/07/29 12:0 a.m.34 views

automattic/mongoose vulnerable to Prototype pollution via Schema.path

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Affected versions of this package are vulnerable to Prototype Pollution. The Schema.path function is vulnerable to prototype pollution when setting the schema object. This vulnerability allows modification...

9.8CVSS8.7AI score0.32676EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder