Skip to content
OpenAdvisories

Package · npm

mongo-express

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-52555

    mongo-express Cross-site Request Forgery vulnerability

    In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.

    mongo-express npm
  • Medium 4.4
    CVE-2021-23372

    Denial of Service (DoS)

    All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash.

    mongo-express npm