Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-23061 1 Mongoosejs 1 Mongoose 2025-10-31 9 Critical
Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900.