Homepage
About Snyk

mongodb-js-metrics@5.0.1 vulnerabilities

Shareable metric recording.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the mongodb-js-metrics package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Privilege Escalation

mongodb-js-metrics is a Shareable metric recording.

Affected versions of this package are vulnerable to Privilege Escalation. A malicious 3rd party with local access to the Windows machine can execute arbitrary software with the privileges of the user who is running MongoDB Compass.

How to fix Privilege Escalation?

Upgrade mongodb-js-metrics to version 6.0.0 or higher.

<6.0.0
Go back to all versions of this package