Known vulnerabilities in mongo-express

Software: mongo-express
Software CPE: cpe:2.3:a:mongodb:mongo-express:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mongo-express mongo-express is affected by 7 known vulnerabilities: 4 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66955 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7788
CWE-94 Medium
No
No
1.0.0 05.09.2022 SB2020121120
SB2022090501
SB2022091209
and 21 more
#VU54417 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21422
CWE-79 Low
No
No
1.0.0 alpha.4 28.06.2021 SB2021062811
#VU52909 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7774
CWE-94 Medium
No
No
1.0.0 06.05.2021 SB2020111735
SB2021050615
SB2021092814
and 24 more
#VU51556 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 18.03.2021 SB2021031810
#VU51555 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 18.03.2021 SB2021031810
#VU52194 - Incorrect Regular Expression
CVE-2021-27290
CWE-185 Medium
No
No
1.0.0 12.03.2021 SB2021041364
SB2021070819
SB2021101939
and 32 more
#VU48222 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-10758
CWE-94 Medium
No
Exploited
0.54.0 24.12.2019 SB2019122417