`mongoose`

Ecosystem:
npm

Package URL:
pkg:npm/mongoose

Total PRs:
8,233 Dependabot PRs

Latest PR:
about 5 hours ago

Unique Repositories:
2,119 repositories

Unique Repos (30 days):
97 repositories

Security Advisories

automattic/mongoose vulnerable to Prototype pollution via Schema.path

GHSA-f825-f98c-gj3g CVE-2022-2564 HIGH published almost 4 years ago • updated 17 days ago

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Affected versions of this package are vulnerable to Pro...

Mongoose Prototype Pollution vulnerability

GHSA-9m93-w8w6-76hh CVE-2023-3696 CRITICAL published almost 3 years ago • updated 12 days ago

Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.3, 6.11.3, and 5.13.20.

Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection

GHSA-wpg9-53fq-2r8h CVE-2026-42334 HIGH published 25 days ago • updated 2 days ago

### Impact This vulnerability allows bypassing Mongoose’s sanitizeFilter query sanitization mechanism via the `$nor` operator. When sanitizeFilte...

Remote Memory Exposure in mongoose

GHSA-r5xw-q988-826m MODERATE published over 5 years ago • updated about 18 hours ago

Versions of `mongoose` before 4.3.6, 3.8.39 are vulnerable to remote memory exposure. Trying to save a number to a field of type Buffer on the aff...

Improper Input Validation in Automattic Mongoose

GHSA-8687-vv9j-hgph CVE-2019-17426 CRITICAL published over 6 years ago • updated about 2 months ago

Automattic Mongoose through 5.7.4 allows attackers to bypass access control (in some applications) because any query object with a `_bsontype` attr...

View all 8 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

build(deps): bump the all-minor-patch group across 1 directory with 8 updates

ardatan/graphql-mesh #9512

9.6.2 → 9.6.3 Patch PR

Open about 22 hours ago 3 comments

chore(deps)(deps): bump the all-packages group across 1 directory with 39 updates

ofri-peretz/eslint #142

9.6.2 → 9.6.3 Patch PR

Open 1 day ago 4 comments

Bump mongoose from 9.6.2 to 9.6.3

kere-sifon/african-stores-web #11

9.6.2 → 9.6.3 Patch PR

Closed 3 days ago 3 comments

Bump mongoose from 9.6.2 to 9.6.3

infinite-kube/Dependabot-Auto-Merge-Pipeline-Demo #551

9.6.2 → 9.6.3 Patch PR

Closed 3 days ago 1 comment

deps(npm)(deps): bump mongoose from 9.1.4 to 9.1.6

The-Skyy-Rose-Collection-LLC/DevSkyy #507

9.1.4 → 9.1.6 Patch PR

Open 14 days ago 3 comments

Bump mongoose from 7.8.8 to 7.8.9

Khairul38/betafore-task-backend #11

7.8.8 → 7.8.9 Patch PR

Open 16 days ago 1 comment

deps(backend): bump mongoose from 7.8.7 to 7.8.9 in /backend

luanacvieira/poc-task-manager-herooffer-ghc #266

7.8.7 → 7.8.9 Patch PR

Open 16 days ago 2 comments

Bump mongoose from 9.6.1 to 9.6.2 in /backend

NadeeshaMedagama/crm_lead_management_system #98

9.6.1 → 9.6.2 Patch PR

Closed 18 days ago 2 comments

chore: bump the npm-deps group across 1 directory with 41 updates

joaoc-dev/blueledger #129

8.23.0 → 8.23.1 Patch PR

Open 19 days ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 4 updates

aragon/app-backend #1325

9.6.1 → 9.6.2 Patch PR

Closed 19 days ago 1 comment

Bump mongoose from 9.6.1 to 9.6.2

infinite-kube/Dependabot-Auto-Merge-Pipeline-Demo #508

9.6.1 → 9.6.2 Patch PR

Closed 22 days ago 1 comment

chore(deps): Bump the production-dependencies group with 5 updates

lawmight/TCDynamics #279

9.6.0 → 9.6.1 Patch PR

Closed 23 days ago 3 comments

chore(deps): bump mongoose from 9.1.4 to 9.1.6 in /server

HitenKala/Car-Rental-Website #1

9.1.4 → 9.1.6 Patch PR

Open 24 days ago 1 comment

chore(deps): Bump the production-dependencies group with 5 updates

lawmight/TCDynamics #276

9.6.0 → 9.6.1 Patch PR

Closed 25 days ago 3 comments

chore: bump the npm-deps group across 1 directory with 40 updates

joaoc-dev/blueledger #128

8.23.0 → 8.23.1 Patch PR

Open 26 days ago 2 comments

deps(deps): bump the minor-and-patch group across 1 directory with 6 updates

imRahul05/mansarovar_public_school #34

8.23.0 → 8.23.1 Patch PR

Open 27 days ago 3 comments

chore(deps): Bump the production-dependencies group with 3 updates

lawmight/TCDynamics #272

9.6.0 → 9.6.1 Patch PR

Closed 30 days ago 4 comments

Bump mongoose from 9.6.0 to 9.6.1

infinite-kube/Dependabot-Auto-Merge-Pipeline-Demo #475

9.6.0 → 9.6.1 Patch PR

Closed about 1 month ago 1 comment

chore(deps-backend): bump mongoose from 8.23.0 to 8.23.1 in /Backend

NadeeshaMedagama/SRI-KO_LMS_MERN_Platform #122

8.23.0 → 8.23.1 Patch PR

Closed about 1 month ago 2 comments

ci: bump mongoose from 8.23.0 to 8.23.1

TobiTenno/express-api-template-oauth2 #777

8.23.0 → 8.23.1 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump mongoose from 9.3.2 to 9.3.3 in /backend

Devdopz/Tech-Bandham #8

9.3.2 → 9.3.3 Patch PR

Closed 2 months ago 1 comment

Bump mongoose from 9.3.2 to 9.3.3

ibiscum/Node.js-for-Beginners #57

9.3.2 → 9.3.3 Patch PR

Closed 2 months ago 1 comment

Bump mongoose from 9.3.2 to 9.3.3 in /api

jatanloya/CCPA-Helper #102

9.3.2 → 9.3.3 Patch PR

Closed 2 months ago 1 comment

Update dependencies: Bump the all-dependencies group across 1 directory with 8 updates

ilovepixelart/ts-cache-mongoose #341

9.3.0 → 9.3.3 Patch PR

Closed 2 months ago 1 comment

Update dependencies: Bump the all-dependencies group across 1 directory with 10 updates

ilovepixelart/ts-express-tsx #408

9.3.0 → 9.3.3 Patch PR

Closed 2 months ago 1 comment

Bump mongoose from 9.3.0 to 9.3.3 in /server

akashg7/shopsmart #23

9.3.0 → 9.3.3 Patch PR

Closed 2 months ago 1 comment

Bump mongoose from 9.3.2 to 9.3.3

Vessel9817/discord-emote-onion-site #9

9.3.2 → 9.3.3 Patch PR

Closed 2 months ago 1 comment

Bump mongoose from 9.3.1 to 9.3.3 in /mongodb

Sebastian-Webster/simple-supertest-express-example #321

9.3.1 → 9.3.3 Patch PR

Closed 2 months ago 1 comment

Bump mongoose from 9.3.1 to 9.3.3

aldwin7894/project-azunyan #700

9.3.1 → 9.3.3 Patch PR

Open 2 months ago 1 comment

Bump mongoose from 9.3.1 to 9.3.2

delta-kor/icarus-server #934

9.3.1 → 9.3.2 Patch PR

Closed 2 months ago 1 comment

build(deps): bump mongoose from 9.3.1 to 9.3.2

Sarwarhridoy4/Digital_Wallet_Management_System #97

9.3.1 → 9.3.2 Patch PR

Open 2 months ago 1 comment

Bump mongoose from 9.3.1 to 9.3.2

delta-kor/stream-iz-server #931

9.3.1 → 9.3.2 Patch PR

Closed 2 months ago 1 comment

Bump mongoose from 9.3.1 to 9.3.2 in /mongodb

Sebastian-Webster/simple-supertest-express-example #320

9.3.1 → 9.3.2 Patch PR

Closed 2 months ago 1 comment

build(deps): bump mongoose from 9.3.1 to 9.3.2

sudhanshu1402/multi-region-mongo-patterns #3

9.3.1 → 9.3.2 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 3 updates

IEEE-Student-Branch-GEHU/ieee.web #29

9.3.0 → 9.3.1 Patch PR

Open 2 months ago 1 comment

build(deps): bump mongoose from 9.3.0 to 9.3.1

codemonkey0612/nestjs-rest #247

9.3.0 → 9.3.1 Patch PR

Closed 2 months ago 1 comment

[ pkg-updates ]: Bump mongoose from 9.3.0 to 9.3.1 in /src

winterrdog/odin-blog-api #227

9.3.0 → 9.3.1 Patch PR

Closed 2 months ago 1 comment

Bump mongoose from 9.3.0 to 9.3.1 in /server

vinsdragonis/DocEdit #687

9.3.0 → 9.3.1 Patch PR

Open 2 months ago 1 comment

chore(backend)(deps): bump mongoose from 7.8.8 to 7.8.9 in /backend in the mongodb-ecosystem group

SupportGonxt/TRADEAI #303

7.8.8 → 7.8.9 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the frontend-dependencies group with 15 updates

lawmight/TCDynamics #194

9.2.2 → 9.2.4 Patch PR

Closed 3 months ago 3 comments

npm(deps): bump mongoose from 9.2.3 to 9.2.4

Chloemlla/Happy-TTS #500

9.2.3 → 9.2.4 Patch PR

Open 3 months ago 4 comments

build(deps): bump mongoose from 9.2.3 to 9.2.4

nest-extended/nest-extended #33

9.2.3 → 9.2.4 Patch PR

Open 3 months ago 1 comment

chore(deps): bump mongoose from 9.2.3 to 9.2.4

kunalagra/sikho #669

9.2.3 → 9.2.4 Patch PR

Closed 3 months ago 1 comment

Update dependencies: Bump the all-dependencies group across 1 directory with 4 updates

ilovepixelart/ts-patch-mongoose #348

9.2.2 → 9.2.4 Patch PR

Open 3 months ago 1 comment

Bump the all-backend-deps group in /backend with 2 updates

geokoko/NTUArena #65

9.2.3 → 9.2.4 Patch PR

Closed 3 months ago 1 comment

Bump mongoose from 9.2.3 to 9.2.4 in /backend

johana2907/pinturas-centro-color #10

9.2.3 → 9.2.4 Patch PR

Closed 3 months ago 1 comment

Update dependencies: Bump the all-dependencies group across 1 directory with 5 updates

ilovepixelart/ts-migrate-mongoose #464

9.2.2 → 9.2.4 Patch PR

Open 3 months ago 1 comment

chore(deps): bump mongoose from 9.2.3 to 9.2.4

victoriacheng15/cover-craft #209

9.2.3 → 9.2.4 Patch PR

Open 3 months ago 1 comment

Bump mongoose from 9.2.3 to 9.2.4 in /toris-backend

jisan3s/toris-cms-platform #5

9.2.3 → 9.2.4 Patch PR

Closed 3 months ago 1 comment

chore(backend)(deps): Bump mongoose from 9.2.3 to 9.2.4 in /backend

dytsou/sdcBillook #96

9.2.3 → 9.2.4 Patch PR

Open 3 months ago 1 comment

Package Details

Name:	`mongoose`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/mongoose`
JSON API:	View JSON

Security Advisories

8

Active advisories

CRITICAL 4

HIGH 3

MODERATE 1

View All npm Advisories

Package Information

Description:

Mongoose MongoDB ODM

Repository:	https://github.com/Automattic/mongoose
Homepage:	https://mongoosejs.com
Latest Release:	`8.15.0` about 1 year ago
Dependent Repos:	833,560
Dependent Packages:	13,842
Downloads:	13,007,275
Ranking:	Top 0.0397% by dependent repos Top 0.0991% by downloads Top 0.0081% by dependent pkgs

PR Status

Open 3,153 (38.3%)

Merged 1,408 (17.1%)

Closed 2,934 (35.6%)

PR Types

Major 1,456 (17.7%)

Minor 4,038 (49.1%)

Patch 1,996 (24.2%)

Removal 4 (0.0%)