{"action":"Upgrade mongosh to 2.3.9 or later.","affected":[{"fixed":"2.3.9","introduced":"0"}],"component":"mongosh","cve_ids":["CVE-2025-1693"],"ecosystem":"npm","epss":0.00225,"exploited":false,"fixed_versions":["2.3.9"],"ghsa_id":"GHSA-r95j-4jvf-mrrw","id":"tcs_01M5KG8HXVAK1FFRECRFW6BB0Y","modified_at":"2025-02-27T17:42:32.177689Z","published_at":"2025-02-27T15:31:51Z","references":["https://osv.dev/vulnerability/GHSA-r95j-4jvf-mrrw","https://nvd.nist.gov/vuln/detail/CVE-2025-1693","https://github.com/mongodb-js/mongosh","https://jira.mongodb.org/browse/MONGOSH-2026"],"severity":{"label":"low","score":3.9},"sources":[{"source":"osv","source_id":"GHSA-r95j-4jvf-mrrw","url":"https://osv.dev/vulnerability/GHSA-r95j-4jvf-mrrw"}],"summary":"MongoDB Shell may be susceptible to control character Injection via shell output"}