{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.54.0"}],"component":"mongo-express","cve_ids":["CVE-2021-23372"],"ecosystem":"npm","epss":0.00878,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m2r3-8492-vx59","id":"tcs_01M5KFZD8BJP4SJYW1ZKXHCECV","modified_at":"2026-03-16T03:07:32.188236Z","published_at":"2021-10-06T17:47:46Z","references":["https://osv.dev/vulnerability/GHSA-m2r3-8492-vx59","https://nvd.nist.gov/vuln/detail/CVE-2021-23372","https://github.com/mongo-express/mongo-express","https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-1085403"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-m2r3-8492-vx59","url":"https://osv.dev/vulnerability/GHSA-m2r3-8492-vx59"}],"summary":"Denial of Service (DoS) in mongo-express"}