CRITICAL 10.0 npm
Mongoose Prototype Pollution vulnerability
GHSA-9m93-w8w6-76hh · BIT-mongoose-2023-3696 · CVE-2023-3696
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.3, 6.11.3, and 5.13.20.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-3696
- WEB https://github.com/Automattic/mongoose/commit/e29578d2ec18a68aeb4717d66dd5eb66bae53de1
- WEB https://github.com/Automattic/mongoose/commit/f1efabf350522257364aa5c2cb36e441cf08f1a2
- WEB https://github.com/automattic/mongoose/commit/305ce4ff789261df7e3f6e72363d0703e025f80d
- PACKAGE https://github.com/Automattic/mongoose
- WEB https://github.com/Automattic/mongoose/releases/tag/7.3.3
- WEB https://huntr.dev/bounties/1eef5a72-f6ab-4f61-b31d-fc66f5b4b467
Ready to move
Start Securing
Free, no credit card | First findings in minutes