npm/@seal-security/mongoose-fixed: critical 10
Prototype Pollution in ali-security/mongoose
Action: Upgrade @seal-security/mongoose-fixed to 5.3.4 or later.
npm i @seal-security/mongoose-fixed@5.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.3 | 5.3.4 | - |
Fixed versions
| 5.3.4 |
Sources
- osv: GHSA-rc4v-99cr-pjcm
- https://github.com/ali-security/mongoose/security/advisories/GHSA-rc4v-99cr-pjcm
- https://github.com/Automattic/mongoose/commit/f1efabf350522257364aa5c2cb36e441cf08f1a2
- https://github.com/ali-security/mongoose
- https://security.snyk.io/vuln/SNYK-JS-MONGOOSE-5777721
published · modified · JSON