Known vulnerabilities in Compass

Vendor: MongoDB, Inc.
Software: Compass
Software CPE: cpe:2.3:a:mongodb:compass:*:*:*:*:*:*:*:*
Website: https://www.mongodb.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Compass Compass is affected by 2 known vulnerabilities: 2 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144160 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-9101		 CWE-1321 Low
No
No
 1.49.6 18.08.2026 SB2026081855
#VU96565 - Improper input validation
CVE-2024-3371		 CWE-20 Low
No
No
 1.42.1 27.08.2024 SB2024082724
SB2024091318