MongoDB Connection-level sanitizeFilter Bypass Leading to NoSQL Injection
Security Advisory
High
Automattic
Affected:
- mongoose 6.13.12
- mongoose 7.6.6
- mongoose 7.8.12
- mongoose 8.0.0
- mongoose 8.24.6
Fixed in:
- mongoose 6.13.13
- mongoose 7.8.13
- mongoose 8.24.7
- mongoose 9.11.4
Referenced CVEs:
CVE-2026-125119 · 7.5
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.