`mongodb-query-parser`

Ecosystem:
npm

Package URL:
pkg:npm/mongodb-query-parser

Total PRs:
16 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
6 repositories

Unique Repos (30 days):
2 repositories

Security Advisories

Remote Code Execution in mongodb-query-parser

GHSA-97mg-3cr6-3x4c CRITICAL published about 5 years ago • updated 4 months ago

Versions of `mongodb-query-parser` prior to 2.0.0 are vulnerable to Remote Code Execution. The package fails to sanitize queries, allowing attacker...

Remote code execution in mongo-express

GHSA-hxmg-hm46-cf62 CVE-2020-24391 CRITICAL published over 4 years ago • updated about 2 months ago

mongo-express before 1.0.0 offers support for certain advanced syntax but implements this in an unsafe way. NOTE: this may overlap CVE-2019-10769.

Recent PRs

Bump the patterns group across 1 directory with 28 updates

sanjaikumarv/my-mongo-express #12

4.3.0 → 4.4.2 Minor PR

Open about 1 month ago

Bump the patterns group across 1 directory with 29 updates

Metaller000/mongo-express #29

4.3.0 → 4.4.2 Minor PR

Open about 1 month ago 1 comment

Bump the patterns group across 1 directory with 29 updates

sanjaikumarv/my-mongo-express #11

4.3.0 → 4.4.2 Minor PR

Closed about 1 month ago 1 comment

Bump the patterns group across 1 directory with 28 updates

Metaller000/mongo-express #28

4.3.0 → 4.4.2 Minor PR

Closed about 2 months ago 1 comment

Bump the patterns group across 1 directory with 28 updates

sanjaikumarv/my-mongo-express #10

4.3.0 → 4.4.2 Minor PR

Closed about 2 months ago 1 comment

Bump the patterns group across 1 directory with 27 updates

sanjaikumarv/my-mongo-express #9

4.3.0 → 4.4.2 Minor PR

Closed 2 months ago 1 comment

Bump mongodb-query-parser from 2.1.2 to 4.4.2

dsp-testing/mongo-express #126

2.1.2 → 4.4.2 Major PR

Open 2 months ago

build(deps): bump the patterns group across 1 directory with 12 updates

mongo-express/mongo-express #1767

4.3.2 → 4.4.0 Minor PR

Open 4 months ago 1 comment

chore(deps): bump mongodb-query-parser from 4.3.2 to 4.4.0

mongodb-js/vscode #1080

4.3.2 → 4.4.0 Minor PR

Merged 4 months ago

Bump the patterns group across 1 directory with 20 updates

Metaller000/mongo-express #19

4.3.0 → 4.3.2 Patch PR

Closed 4 months ago 1 comment

Bump the patterns group across 1 directory with 19 updates

Metaller000/mongo-express #18

4.3.0 → 4.3.2 Patch PR

Closed 4 months ago 1 comment

Bump the patterns group with 18 updates

Metaller000/mongo-express #17

4.3.0 → 4.3.2 Patch PR

Open 4 months ago

Bump the patterns group with 18 updates

Metaller000/mongo-express #15

4.3.0 → 4.3.2 Patch PR

Open 4 months ago

Bump the patterns group with 18 updates

Metaller000/mongo-express #10

4.3.0 → 4.3.2 Patch PR

Closed 4 months ago

build(deps): bump the patterns group with 18 updates

Metaller000/mongo-express #5

4.3.0 → 4.3.2 Patch PR

Closed 4 months ago

chore(deps): bump the devtools-shared-prod group with 3 updates

mongodb-js/compass #6905

4.3.0 → 4.3.2 Patch PR

Closed 5 months ago

Package Details

Name:	`mongodb-query-parser`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/mongodb-query-parser`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 2

View All npm Advisories

Package Information

Description:

Parse MongoDB queries

Repository:	https://github.com/mongodb-js/devtools-shared
Homepage:	https://github.com/mongodb-js/devtools-shared
Latest Release:	`4.3.2` 6 months ago
Dependent Repos:	100
Dependent Packages:	28
Downloads:	413,783
Ranking:	Top 1.4249% by dependent repos Top 0.9329% by downloads Top 0.9172% by dependent pkgs

PR Status

Open 6 (37.5%)

Merged 1 (6.3%)

Closed 9 (56.3%)

PR Types

Patch 7 (43.8%)

Minor 8 (50.0%)