{"action":"Upgrade mongo-express to 0.54.0 or later.","affected":[{"fixed":"0.54.0","introduced":"0"}],"component":"mongo-express","cve_ids":["CVE-2019-10758"],"ecosystem":"npm","epss":0.84726,"exploited":true,"fixed_versions":["0.54.0"],"ghsa_id":"GHSA-h47j-hc6x-h3qq","id":"tcs_01M5KFT48DY4PNBGY3AT25SDNP","modified_at":"2026-09-10T03:49:24.747814360Z","published_at":"2019-12-30T19:30:31Z","references":["https://osv.dev/vulnerability/GHSA-h47j-hc6x-h3qq","https://github.com/mongo-express/mongo-express/security/advisories/GHSA-h47j-hc6x-h3qq","https://nvd.nist.gov/vuln/detail/CVE-2019-10758","https://github.com/mongo-express/mongo-express/pull/522","https://github.com/mongo-express/mongo-express/commit/7d365141deadbd38fa961cd835ce68eab5731494","https://github.com/mongo-express/mongo-express/commit/d8c9bda46a204ecba1d35558452685cd0674e6f2","https://github.com/mongo-express/mongo-express","https://github.com/mongo-express/mongo-express/blob/ea02b364d43f179f191fc91fb9962efdb0843a8d/lib/bson.js#L60","https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-473215","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-10758"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-h47j-hc6x-h3qq","url":"https://osv.dev/vulnerability/GHSA-h47j-hc6x-h3qq"},{"source":"kev","source_id":"CVE-2019-10758","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Remote Code Execution Vulnerability in NPM mongo-express"}