www-spam

1 exploit Active since Dec 2024
CVE-2024-53900 NOMISEC CRITICAL WORKING POC
mongoosejs/mongoose < 6.13.5 and >=8.0.0-rc0 <8.8.3 - Search Injection via $where in Match
Mongoose before 8.8.3 can improperly use $where in match, leading to search injection.
CVSS 9.1