mongodb

MongoDB Driver may publish events containing authentication-related data

Remote code execution via MongoDB BSON parser through prototype pollution

Malicious code in mongodb-atlas-cli-toc-generator (npm)

Malicious code in mongodb-compass (npm)

Malicious code in mongodb-stitch-server-testutils (npm)

MongoDB Shell may be susceptible to control character injection via pasting

MongoDB Shell may be susceptible to control character Injection via shell output

ApostropheCMS MFA/TOTP Bypass via Incorrect MongoDB Query in Bearer Token Middleware

MongoDB Shell may be susceptible to Control Character Injection via autocomplete

Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution

Downloads Resources over HTTP in mongodb-instance

Malicious code in mongodb-stitch-browser-testutils (npm)

Malicious code in mongodb-cd (npm)

ejson shell parser in MongoDB Compass maybe bypassed

Malicious code in mongodb-chatbot-verified-answers (npm)

Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter

Malicious code in moonbeam-mongodb (npm)

Malicious code in @voiceflow/nestjs-mongodb (npm)

Malicious code in mongoose-mongodb (npm)

Malicious code in mongodb-orn (npm)