automattic/mongoose Security Advisories | GitStock

medium2026-07-24

Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)

GHSA-664h-wqgq-64gw · CVE-2026-73562

high2026-05-05

Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection

GHSA-wpg9-53fq-2r8h · CVE-2026-42334

critical2025-01-15

Mongoose search injection vulnerability

GHSA-vg7j-7cwx-8wgw · CVE-2025-23061

high2024-12-02

Mongoose search injection vulnerability

GHSA-m7xq-9374-9rvx · CVE-2024-53900

critical2023-07-17

Mongoose Prototype Pollution vulnerability

GHSA-9m93-w8w6-76hh · CVE-2023-3696

high2022-07-29

automattic/mongoose vulnerable to Prototype pollution via Schema.path

GHSA-f825-f98c-gj3g · CVE-2022-2564