- How many CVEs does mongodb-js have?
- mongodb-js has 10 published CVE records since 2020, including 7 in the last two years.
- How many mongodb-js CVEs are in CISA KEV?
- None of mongodb-js's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which mongodb-js products have the most CVEs?
- The mongodb-js products with the most published CVEs are mongosh, compass, vscode, kerberos, @mongodb-js/connection-form.
- What are the most common weakness types in mongodb-js CVEs?
- mongodb-js's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-150 (Improper Neutralization of Escape, Meta, or Control Sequences), CWE-426 (Untrusted Search Path), CWE-427 (Uncontrolled Search Path Element).
- Are there public exploits for mongodb-js vulnerabilities?
- Yes — 1 of mongodb-js's CVEs have a known public exploit.
- How many critical mongodb-js vulnerabilities are there?
- mongodb-js has 1 critical and 6 high-severity CVEs.
- What is the average severity of mongodb-js CVEs?
- The average CVSS base score across mongodb-js's scored CVEs is 7.5.