npm/mongoose: medium 5.1
Remote Memory Exposure in mongoose
Action: Upgrade mongoose to 3.8.39 or later.
npm i mongoose@3.8.39npm i mongoose@4.3.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.5.5 | 3.8.39 | - |
| 4.0.0 | 4.3.6 | - |
Fixed versions
| 3.8.39 | 4.3.6 |
Sources
- osv: GHSA-r5xw-q988-826m
- https://github.com/Automattic/mongoose/issues/3764
- https://gist.github.com/ChALkeR/440bc3dfcbd9b6da75c3
- https://gist.github.com/ChALkeR/d4a8055625221b6e65f0
- https://www.npmjs.com/advisories/599
published · modified · JSON