Mongoose Prototype Pollution via Schema.prototype.virtual(): POC & Fix
Security Advisory
High
Automattic
Affected:
- mongoose <= 6.13.2
- mongoose >= 7.8.12 <= 7.8.13
- mongoose >= 8.0.0 <= 8.2.4
- mongoose >= 8.3.0 <= 8.3.2
Fixed in:
- mongoose >= 6.13.3
- mongoose >= 8.2.5
Referenced CVEs:
CVE-2026-125118 · 6.5
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.