PT-2026-141173

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Schema.prototype.virtual builds nested virtual paths without applying the special-property validation already used by Schema.path and Schema.add. An attacker w...