CVE-2024-6376
1 advisory.
npm/@mongodb-js/connection-form CVE-2024-6376: high 7, EPSS 0.48%
ejson shell parser in MongoDB Compass maybe bypassed
Action: Upgrade @mongodb-js/connection-form to 1.20.1 or later.
npm i @mongodb-js/connection-form@1.20.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.20.1 | - |
Fixed versions
| 1.20.1 |
Sources
- osv: GHSA-jxr4-4prv-mh83
- https://nvd.nist.gov/vuln/detail/CVE-2024-6376
- https://github.com/mongodb-js/compass/commit/b1f8050d49d66be3bc499cb317a1e1de45390e51
- https://github.com/mongodb-js/compass
- https://jira.mongodb.org/browse/COMPASS-7496
CVE-2024-6376 · published · modified · JSON