CVE-2024-53900
1 advisory.
npm/mongoose CVE-2024-53900: critical 9.8, EPSS 3.98%
Mongoose search injection vulnerability
Action: Upgrade mongoose to 5.13.23 or later.
npm i mongoose@8.8.3npm i mongoose@7.8.3npm i mongoose@6.13.5npm i mongoose@5.13.23Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0-rc0 | 8.8.3 | - |
| 7.0.0-rc0 | 7.8.3 | - |
| 6.0.0-rc0 | 6.13.5 | - |
| 3.6.0-rc0 | 5.13.23 | - |
Fixed versions
| 8.8.3 | 7.8.3 | 6.13.5 | 5.13.23 |
Sources
- osv: GHSA-m7xq-9374-9rvx
- https://nvd.nist.gov/vuln/detail/CVE-2024-53900
- https://github.com/github/advisory-database/pull/6769
- https://github.com/github/advisory-database/pull/6776
- https://github.com/Automattic/mongoose/commit/33679bcf8ca43d74e3e8ecd4cc224826772d805b
- https://github.com/Automattic/mongoose/commit/bbb6fa7ecb44bbaf5bea955d886378a1247bce0b
- https://github.com/Automattic/mongoose/commit/c9e86bff7eef477da75a29af62a06d41a835a156
- https://github.com/Automattic/mongoose
- https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md
- https://github.com/Automattic/mongoose/compare/6.13.4...6.13.5
- https://github.com/Automattic/mongoose/compare/7.8.2...7.8.3
- https://github.com/Automattic/mongoose/compare/8.8.2...8.8.3
- https://github.com/Automattic/mongoose/releases
- https://www.npmjs.com/package/mongoose?activeTab=versions
CVE-2024-53900 · published · modified · JSON