Skip to content
OpenAdvisories

Package · npm

mongosh

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-1692

    MongoDB Shell may be susceptible to control character injection via pasting

    The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obf…

    MongoDB mongosh mongosh npm