Product by Mongoosejs
Mongoose
6 known vulnerabilities in Mongoose (Mongoosejs), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-23061 | Mongoose: Code Injection | 9.0 | |
| Critical | CVE-2024-53900 | Mongoose: security vulnerability | 9.1 | |
| Critical | CVE-2022-2564 | Prototype Pollution in automattic/mongoose | 7.0 | |
| Critical | CVE-2023-3696 | Prototype Pollution in automattic/mongoose | 10.0 | |
| Critical | CVE-2019-17426 | Mongoose: security vulnerability | 9.1 | |
| High | CVE-2026-42334 | Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection | 7.5 |