mongoose
9.11.4 · 23 Oct 2026MIT5.8M / weekRepositoryHomepagenpmAtom feed
Your version
8.6.3
17 Sep 20248.24.7 is the newest release of 8.x.
Security
4 advisories affect 8.6.3; 8.24.1 fixes them
- CriticalMongoose search injection vulnerabilityGHSA-vg7j-7cwx-8wgw · 15 Jan 2025Fixed in 8.9.5
- HighMongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL InjectionGHSA-wpg9-53fq-2r8h · 5 May 2026Fixed in 8.22.1
- HighMongoose search injection vulnerabilityGHSA-m7xq-9374-9rvx · 2 Dec 2024Fixed in 8.8.3
- ModerateMongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)GHSA-664h-wqgq-64gw · 24 Jul 2026Fixed in 8.24.1
Release note
No note was found for 8.6.3 on GitHub or in the repository's changelog.