CRITICAL10.0CVE-2023-3696Prototype Pollution in automattic/mongoose >= 7.0.0, < 7.3.3
>= 8.0.0-rc0, < 8.8.3
CRITICAL9.8CVE-2022-24304Mongoose Vulnerable to Prototype Pollution in Schema Object >= 6.0.0, < 6.4.6
CRITICAL9.1Improper Input Validation in Automattic Mongoose
>= 5.0.0, < 5.7.5
CRITICAL9.0Mongoose search injection vulnerability
>= 8.0.0-rc0, < 8.9.5
HIGH7.5Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection
from 0, < 6.13.9
HIGH7.0Prototype Pollution in automattic/mongoose
>= 6.0.0, < 6.4.6