Skip to content
OpenAdvisories

Package · npm

marsdb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-5mrr-rgp6-x4gr

    Command Injection in marsdb

    All versions of `marsdb` are vulnerable to Command Injection. In the `DocumentMatcher` class, selectors on `$where` clauses are passed to a Function constructor unsanitized. This allows attackers to run arbitrary commands in the system when the function is ex…

    marsdb npm