Threats tagged 'bit-mongoose-2025-23061'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.0	EPSS 7.2%	CVE-2025-23061mongoosejs Mongoose · Code Injection Critical9.0EPSS 7.2%2025-09-25CVE Database V5CVE-2025-23061 Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900. EPSS 7.2%Vulnerability CWE-94 #bit-mongoose-2025-23061 #bitnami	CVE Database V5	2025-09-25

Page 1 of 1