{"action":"Upgrade mongosh to 2.3.9 or later.","affected":[{"fixed":"2.3.9","introduced":"0"}],"component":"mongosh","cve_ids":["CVE-2025-1692"],"ecosystem":"npm","epss":0.00278,"exploited":false,"fixed_versions":["2.3.9"],"ghsa_id":"GHSA-973h-3x6p-qg37","id":"tcs_01M5KFF2HMJ13BH7S9SSBZ11F7","modified_at":"2025-02-27T17:42:32.094772Z","published_at":"2025-02-27T15:31:51Z","references":["https://osv.dev/vulnerability/GHSA-973h-3x6p-qg37","https://nvd.nist.gov/vuln/detail/CVE-2025-1692","https://github.com/mongodb-js/mongosh","https://jira.mongodb.org/browse/MONGOSH-2025"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-973h-3x6p-qg37","url":"https://osv.dev/vulnerability/GHSA-973h-3x6p-qg37"}],"summary":"MongoDB Shell may be susceptible to control character injection via pasting"}