mongodb-js-metrics@4.3.0 vulnerabilities

Shareable metric recording.

  • latest version

    7.9.0

  • latest non vulnerable version

  • first published

    9 years ago

  • latest version published

    2 years ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the mongodb-js-metrics package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Privilege Escalation

    mongodb-js-metrics is a Shareable metric recording.

    Affected versions of this package are vulnerable to Privilege Escalation. A malicious 3rd party with local access to the Windows machine can execute arbitrary software with the privileges of the user who is running MongoDB Compass.

    How to fix Privilege Escalation?

    Upgrade mongodb-js-metrics to version 6.0.0 or higher.

    <6.0.0