{"action":"Upgrade loopback-connector-mongodb to 3.6.0 or later.","affected":[{"fixed":"3.6.0","introduced":"0"}],"component":"loopback-connector-mongodb","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.6.0"],"ghsa_id":"GHSA-hxwc-5vw9-2w4w","id":"tcs_01M5KFWGHTNPZR3V214P2HM003","modified_at":"2021-09-27T15:13:26Z","published_at":"2020-09-02T15:52:39Z","references":["https://osv.dev/vulnerability/GHSA-hxwc-5vw9-2w4w","https://github.com/loopbackio/loopback-connector-mongodb","https://loopback.io/doc/en/lb3/Security-advisory-08-15-2018.html","https://www.npmjs.com/advisories/767"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-hxwc-5vw9-2w4w","url":"https://osv.dev/vulnerability/GHSA-hxwc-5vw9-2w4w"}],"summary":"NoSQL Injection in loopback-connector-mongodb"}