{"action":"Upgrade mongoose to 3.8.39 or later.","affected":[{"fixed":"3.8.39","introduced":"3.5.5"},{"fixed":"4.3.6","introduced":"4.0.0"}],"component":"mongoose","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.8.39","4.3.6"],"ghsa_id":"GHSA-r5xw-q988-826m","id":"tcs_01M5KG85K06A7MZYA1N62AK2H6","modified_at":"2023-12-07T22:05:28Z","published_at":"2020-09-01T19:39:37Z","references":["https://osv.dev/vulnerability/GHSA-r5xw-q988-826m","https://github.com/Automattic/mongoose/issues/3764","https://gist.github.com/ChALkeR/440bc3dfcbd9b6da75c3","https://gist.github.com/ChALkeR/d4a8055625221b6e65f0","https://www.npmjs.com/advisories/599"],"severity":{"label":"medium","score":5.1},"sources":[{"source":"osv","source_id":"GHSA-r5xw-q988-826m","url":"https://osv.dev/vulnerability/GHSA-r5xw-q988-826m"}],"summary":"Remote Memory Exposure in mongoose"}