{"action":"Upgrade loopback-connector-mongodb to 3.6.0 or later.","affected":[{"fixed":"3.6.0","introduced":"0"}],"component":"loopback-connector-mongodb","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.6.0"],"ghsa_id":"GHSA-m734-r4g6-34f9","id":"tcs_01M5KFZY6YRBTMWPM8B7WBA37R","modified_at":"2021-08-04T20:47:58Z","published_at":"2019-06-04T19:36:17Z","references":["https://osv.dev/vulnerability/GHSA-m734-r4g6-34f9","https://github.com/strongloop/loopback-connector-mongodb/issues/403","https://github.com/strongloop/loopback-connector-mongodb/pull/452","https://github.com/strongloop/loopback-connector-mongodb/commit/ee24cd08b8ccc32711264831c71b1da628df357b","https://loopback.io/doc/en/lb3/Security-advisory-08-15-2018.html","https://www.npmjs.com/advisories/696"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-m734-r4g6-34f9","url":"https://osv.dev/vulnerability/GHSA-m734-r4g6-34f9"}],"summary":"NoSQL Injection in loopback-connector-mongodb"}