CVE-2023-3696

9.8

CRITICALCVSS v3

Published

July 17, 2023

Affected

8 projects

Assigned by

[email protected]

Severity scale

010

Description

Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4.

mongoose

NPMMongoose MongoDB ODM

= *, >= 6.0.0, < 6.11.3, < 5.13.20, >= 7.0.0, < 7.3.4NVD

@types/mongoose

NPMStub TypeScript definitions entry for mongoose, which provides its own types definitions

= *, >= 6.0.0, < 6.11.3, < 5.13.20, >= 7.0.0, < 7.3.4NVD

@bakjs/mongoose

NPM

More on this CVE

NVD↗GitHub Advisory↗

= *, >= 6.0.0, < 6.11.3, < 5.13.20, >= 7.0.0, < 7.3.4NVD

cesanta/mongoose

GitHubEmbedded web server, with TCP/IP network stack, MQTT and Websocket

= *, >= 6.0.0, < 6.11.3, < 5.13.20, >= 7.0.0, < 7.3.4NVD

Automattic/mongoose

GitHubMongoDB object modeling designed to work in an asynchronous environment.

= *, >= 6.0.0, < 6.11.3, < 5.13.20, >= 7.0.0, < 7.3.4NVD

mongoose

Python Package IndexEating all the snakes.

= *, >= 6.0.0, < 6.11.3, < 5.13.20, >= 7.0.0, < 7.3.4NVD

mongoose

Crates.ioConvenient MongoDb Wrappers

= *, >= 6.0.0, < 6.11.3, < 5.13.20, >= 7.0.0, < 7.3.4NVD

mongoose

RubyGemsMongoose is a module that allows you to create and databases. It has an ActiveRecord-like interface, uses Skiplists for its indexing, and uses Marshal to serializeits data.

= *, >= 6.0.0, < 6.11.3, < 5.13.20, >= 7.0.0, < 7.3.4NVD

Security Advisories

CVE-2023-3696

Description

More on this CVE