Prototype Pollution in automattic/mongoose

CVE-2023-3696

What is CVE-2023-3696?

A prototype pollution vulnerability was identified in the Mongoose library prior to version 7.3.4, developed by Automattic. This vulnerability allows attackers to manipulate the prototype of built-in objects, potentially enabling them to alter object properties globally. This could lead to unexpected behaviors and security issues in applications utilizing affected Mongoose versions. It is essential for developers to upgrade to the latest version to mitigate these risks and secure their applications.

References