https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:32:48.450786+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongoose-2022-2564 BIT-mongoose-2022-2564 — Prototype Pollution in automattic/mongoose 2026-10-03T03:32:48.527646+00:00

Affected: Bitnami: mongoose

Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6.

 https://cve.radiocsirt.org/vuln/euvd-2026-202875 EUVD-2026-202875 2026-10-03T03:32:48.527751+00:00 EUVD-2026-202875 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2564 fkie_cve-2022-2564 2026-10-03T03:32:48.527770+00:00

Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6.

 https://cve.radiocsirt.org/vuln/ghsa-f825-f98c-gj3g GHSA-f825-f98c-gj3g — automattic/mongoose vulnerable to Prototype pollution via Schema.path 2026-10-03T03:32:48.527794+00:00

Affected: npm: mongoose

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Affected versions of this package are vulnerable to Prototype Pollution. The `Schema.path()` function is vulnerable to prototype pollution when setting the schema object. This vulnerability allows modification of the Object prototype and could be manipulated into a Denial of Service (DoS) attack.

 https://cve.radiocsirt.org/vuln/gsd-2022-2564 gsd-2022-2564 2026-10-03T03:32:48.527817+00:00 gsd-2022-2564