MO
Product
Mongoose
by mongoosejs · last CVE May 14, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 1Medium 0Low 0
Watch

Add Mongoose to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42334
7.5
0%
May 14
Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection
Affected: before 6.13.9; 7.0.0 before 7.8.9; 8.0.0 before 8.22.1; 9.0.0 before 9.1.6
Showing 1