Skip to content
OpenAdvisories

Package · npm

loopback-connector-mongodb

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High —
    GHSA-hxwc-5vw9-2w4w

    NoSQL Injection in loopback-connector-mongodb

    Versions of `loopback-connector-mongodb` prior to 3.6.0 are vulnerable to NoSQL Injection. Filters passed to the database query are not properly sanitized which leads to execution of code on the database driver and data leak. ## Recommendation Upgrade to vers…

    loopback-connector-mongodb npm
  • High —
    GHSA-m734-r4g6-34f9

    NoSQL Injection in loopback-connector-mongodb

    Versions of `loopback-connector-mongodb` before 3.6.0 are vulnerable to NoSQL injection. MongoDB Connector for LoopBack fails to properly sanitize a filter passed to query the database by allowing the dangerous `$where` property to be passed to the MongoDB Dr…

    loopback-connector-mongodb npm