automattic Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by automattic

JSON RSS CSV 🔔 Create Alert Trigger

9 November 2026

Injection Flaw in Mongoose Affects Document Counting Functionality
CVE-2026-125120
AutomatticMongoose9.8CRITICAL
MongoDB Object Modeling Tool Vulnerability in Mongoose
CVE-2026-125119
AutomatticMongoose7.5HIGH
Document Inheritance Vulnerability in Mongoose by Automattic
CVE-2026-125117
AutomatticMongoose8.2HIGH

14 May 2026

Query Sanitization Bypass in Mongoose by Automattic
CVE-2026-42334
AutomatticMongoose7.5HIGH

2 December 2024

Search Injection Vulnerability in Mongoose by Automattic
CVE-2024-53900
AutomatticMongoose👾🟡9.1CRITICAL

17 July 2023

Prototype Pollution in automattic/mongoose
CVE-2023-3696
AutomatticAutomattic/mongoose10CRITICAL

28 July 2022

Prototype Pollution in automattic/mongoose
CVE-2022-2564
AutomatticAutomattic/mongooseEPSS 31%7HIGH