Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • C
Malicious Package
Affects alleged_mongoose_z3n | Versions *
No fix available
npmPublished 1 Sept 2026
  • C
Embedded Malicious Code
Affects atrix-mongoose | Versions =1.0.1
Has fix
npmPublished 24 Nov 2025
  • C
Embedded Malicious Code
Affects autotel-mongoose | Versions =0.0.3=1.0.2=2.0.5=3.0.1=4.0.1=5.0.2=6.0.1
Has fix
npmPublished 4 Jun 2026
  • C
Malicious Package
Affects database-mongoose-kit | Versions *
No fix available
npmPublished 10 Dec 2025
  • H
Private Data DisclosureCVE-2016-10533
Affects express-restify-mongoose | Versions < 2.5.0>= 3.0.0 <3.1.0
Has fix
npmPublished 22 Jun 2016
  • C
Malicious Package
Affects high_mongoose_z3n | Versions *
No fix available
npmPublished 14 Sept 2026
  • C
Malicious Package
Affects late_mongoose_z3n | Versions *
No fix available
npmPublished 17 Sept 2026
  • M
Prototype Pollution
Affects mongoose | Versions <6.13.10>=7.0.0-rc0 <7.8.10>=8.0.0-rc0 <8.24.1>=9.0.0-rc0 <9.7.2
Has fix
npmPublished 26 Jul 2026
  • H
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-42334
Affects mongoose | Versions <6.13.9>=7.0.0-rc0 <7.8.9>=8.0.0-rc0 <8.22.1>=9.0.0-rc0 <9.1.6
Has fix
npmPublished 6 May 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2025-23061
Affects mongoose | Versions <6.13.6>=7.0.0 <7.8.4>=8.0.0 <8.9.5
Has fix
npmPublished 15 Jan 2025
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2024-53900
Affects mongoose | Versions <6.13.5>=7.0.0 <7.8.3>=8.0.0 <8.8.3
Has fix
npmPublished 3 Dec 2024
  • H
Prototype PollutionCVE-2023-3696
Affects mongoose | Versions <5.13.20>=6.0.0-rc0 <6.11.3>=7.0.0-rc0 <7.3.4
Has fix
npmPublished 17 Jul 2023
  • H
Prototype PollutionCVE-2022-2564
Affects mongoose | Versions <5.13.15>=6.0.0 <6.4.6
Has fix
npmPublished 28 Jul 2022
  • M
Prototype Pollution
Affects mongoose | Versions <5.12.2
Has fix
npmPublished 24 Mar 2021
  • M
Information ExposureCVE-2019-17426
Affects mongoose | Versions <4.13.21>=5.0.0 <5.7.5
Has fix
npmPublished 10 Oct 2019
  • H
Denial of Service (DoS)
Affects mongoose | Versions >=4.0.0 <4.1.10
Has fix
npmPublished 13 Dec 2016
  • M
Remote Memory Exposure
Affects mongoose | Versions >=3.5.5 <3.8.39>=4.0.0 <4.3.6
Has fix
npmPublished 23 Jan 2016
  • C
Malicious Package
Affects mongoose-4 | Versions *
No fix available
npmPublished 4 Dec 2024
  • C
Malicious Package
Affects mongoose-apis | Versions *
No fix available
npmPublished 3 Mar 2026
  • M
Regular Expression Denial of Service (ReDoS)
Affects mongoose-beautiful-unique-validation | Versions <7.1.1
Has fix
npmPublished 26 Feb 2018
  • C
Malicious Package
Affects mongoose-ci | Versions *
No fix available
npmPublished 29 Sept 2025
  • C
Malicious Package
Affects mongoose-geojson-schema-2d | Versions =1.0.0
Has fix
npmPublished 6 Jun 2023
  • C
Malicious Package
Affects mongoose-geospatial | Versions =1.0.0
Has fix
npmPublished 6 Jun 2023
  • C
Malicious Package
Affects mongoose-json-format | Versions *
No fix available
npmPublished 6 Jul 2026
  • C
Malicious Package
Affects mongoose-jsonify | Versions *
No fix available
npmPublished 21 Jun 2026
  • C
Malicious Package
Affects mongoose-lean-hooks | Versions *
No fix available
npmPublished 6 Jul 2026
  • M
Arbitrary Code Injection
Affects mongoosemask | Versions *
No fix available
npmPublished 1 May 2017
  • C
Malicious Package
Affects mongoose-mongodb | Versions *
No fix available
npmPublished 14 May 2025
  • C
Malicious Package
Affects mongoose-odm | Versions *
No fix available
npmPublished 18 Nov 2025
  • C
Malicious Package
Affects mongooses-db | Versions *
No fix available
npmPublished 16 May 2025