CVE-2019-10758
1 advisory.
npm/mongo-express CVE-2019-10758: critical 9.9, exploited
Remote Code Execution Vulnerability in NPM mongo-express
Action: Upgrade mongo-express to 0.54.0 or later.
npm i mongo-express@0.54.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54.0 | - |
Fixed versions
| 0.54.0 |
Sources
- osv: GHSA-h47j-hc6x-h3qq
- kev: CVE-2019-10758
- https://github.com/mongo-express/mongo-express/security/advisories/GHSA-h47j-hc6x-h3qq
- https://nvd.nist.gov/vuln/detail/CVE-2019-10758
- https://github.com/mongo-express/mongo-express/pull/522
- https://github.com/mongo-express/mongo-express/commit/7d365141deadbd38fa961cd835ce68eab5731494
- https://github.com/mongo-express/mongo-express/commit/d8c9bda46a204ecba1d35558452685cd0674e6f2
- https://github.com/mongo-express/mongo-express
- https://github.com/mongo-express/mongo-express/blob/ea02b364d43f179f191fc91fb9962efdb0843a8d/lib/bson.js#L60
- https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-473215
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-10758
CVE-2019-10758 · published · modified · JSON