Skip to content
OpenAdvisories

Package · npm

@seal-security/mongoose-fixed

1 known vulnerabilities.

1 result · Feed

  • Critical 10.0

    Prototype Pollution in ali-security/mongoose

    ### Impact This vulnerability causes a Prototype Pollution in document.js, through functions such as findByIdAndUpdate(). For applications using Express and EJS, this can potentially allow remote code execution. ### Patches The original patched version for mo…