CVE-2022-2564

9.8

CRITICALCVSS v3

Published

July 28, 2022

Affected

7 projects

Assigned by

[email protected]

Severity scale

010

Description

Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6.

mongoose

NPMMongoose MongoDB ODM

= *, < 5.13.15, >= 6.0.0, < 6.4.6NVD

@types/mongoose

NPMStub TypeScript definitions entry for mongoose, which provides its own types definitions

= *, < 5.13.15, >= 6.0.0, < 6.4.6NVD

@bakjs/mongoose

NPM

More on this CVE

NVD↗GitHub Advisory↗

= *, < 5.13.15, >= 6.0.0, < 6.4.6NVD

cesanta/mongoose

GitHubEmbedded web server, with TCP/IP network stack, MQTT and Websocket

= *, < 5.13.15, >= 6.0.0, < 6.4.6NVD

Automattic/mongoose

GitHubMongoDB object modeling designed to work in an asynchronous environment.

= *, < 5.13.15, >= 6.0.0, < 6.4.6NVD

mongoose

Python Package IndexEating all the snakes.

= *, < 5.13.15, >= 6.0.0, < 6.4.6NVD

mongoose

RubyGemsMongoose is a module that allows you to create and databases. It has an ActiveRecord-like interface, uses Skiplists for its indexing, and uses Marshal to serializeits data.

= *, < 5.13.15, >= 6.0.0, < 6.4.6NVD

Security Advisories

CVE-2022-2564

Description

More on this CVE