GHSA-PCRW-H46H-C93H Mongoose: sanitizeFilter not applied on countDocuments

Impact sanitizeFilter is Mongoose's mechanism for protecting against query selector injection attacks. In older versions of Mongoose, sanitizeFilter was not applied for countDocuments queries. Patches Patches have been released for all supported Mongoose major release lines. Please upgrade to the...

Mongoose: sanitizeFilter not applied on countDocuments

Impact sanitizeFilter is Mongoose's mechanism for protecting against query selector injection attacks. In older versions of Mongoose, sanitizeFilter was not applied for countDocuments queries. Patches Patches have been released for all supported Mongoose major release lines. Please upgrade to the...

EUVD-2026-120503

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12, 8.24.3, and 9.9.2, Mongoose countDocuments does not apply the configured sanitizeFilter query selector injection defense. An application that enables sanitizeFilter and passes...

PT-2026-141175

Name of the Vulnerable Software and Affected Versions Mongoose versions prior to 6.13.11 Mongoose versions prior to 7.8.12 Mongoose versions prior to 8.24.3 Mongoose versions prior to 9.9.2 Description Mongoose is a MongoDB object modeling tool for asynchronous environments. The countDocuments...