CVE-2019-17426
1 advisory.
npm/mongoose CVE-2019-17426: critical 9.1
Improper Input Validation in Automattic Mongoose
Action: Upgrade mongoose to 4.13.21 or later.
npm i mongoose@5.7.5npm i mongoose@4.13.21Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.7.5 | - |
| 0 | 4.13.21 | - |
Fixed versions
| 5.7.5 | 4.13.21 |
Sources
- osv: GHSA-8687-vv9j-hgph
- https://nvd.nist.gov/vuln/detail/CVE-2019-17426
- https://github.com/Automattic/mongoose/issues/8222
- https://github.com/Automattic/mongoose/commit/f3eca5b94d822225c04e96cbeed9f095afb3c31c
- https://github.com/Automattic/mongoose/commit/f88eb2524b65a68ff893c90a03c04f0913c1913e
- https://github.com/Automattic/mongoose
- https://github.com/Automattic/mongoose/commits/4.13.21
- https://github.com/Automattic/mongoose/releases/tag/4.13.21
CVE-2019-17426 · published · modified · JSON