GHSA-PCRW-H46H-C93H Mongoose: sanitizeFilter not applied on countDocuments

Impact sanitizeFilter is Mongoose's mechanism for protecting against query selector injection attacks. In older versions of Mongoose, sanitizeFilter was not applied for countDocuments queries. Patches Patches have been released for all supported Mongoose major release lines. Please upgrade to the...

Mongoose: sanitizeFilter not applied on countDocuments

Impact sanitizeFilter is Mongoose's mechanism for protecting against query selector injection attacks. In older versions of Mongoose, sanitizeFilter was not applied for countDocuments queries. Patches Patches have been released for all supported Mongoose major release lines. Please upgrade to the...

EUVD-2026-120503

Mongoose: sanitizeFilter not applied on countDocuments...

PT-2026-141175

Name of the Vulnerable Software and Affected Versions Mongoose versions prior to 6.13.11 Mongoose versions prior to 7.8.12 Mongoose versions prior to 8.24.3 Mongoose versions prior to 9.9.2 Description Mongoose is a MongoDB object modeling tool for asynchronous environments. The countDocuments...

CVE-2026-79770

A flaw was found in Nokogiri. A remote attacker can inject specially crafted CSS selectors into methods such as Nodecss or Nodeatcss. This injection can lead to regular expression denial of service ReDoS due to exponential regex backtracking, causing the application to become unresponsive...

CVE-2026-41043

Apache ActiveMQ and Apache ActiveMQ Web are vulnerable to a Basic XSS vulnerability due to the improper neutralization of script-related HTML tags in web pages. An authenticated attacker can inject malicious HTML content into a JMS selector field and override the content type to HTML (instead of ...

CVE-2026-41043 Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can show malicious content when browsing queues in the web console by overriding the content type to be HTML instead of XML and by injecting...

UBUNTU-CVE-2021-32821

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service ReDoS. An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite...

CVE-2021-32821 Regular expression Denial of Service in MooTools

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service ReDoS. An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite...