Mongoose: sanitizeFilter not applied on countDocuments
What to do
- Upgrade to a fixed version: mongoose 6.13.11, mongoose 7.8.12, mongoose 8.24.3, mongoose 9.9.2.
- Redeploy and restart long-running processes so they load the fixed code.
Affected packages
mongoose
- < 6.13.11
- 6.13.11
Check your project: npm ls mongoose --all
Is mongoose@6.13.11 safe to install? See the upgrade verdict →
mongoose
- >= 7.0.0, < 7.8.12
- 7.8.12
Check your project: npm ls mongoose --all
Is mongoose@7.8.12 safe to install? See the upgrade verdict →
mongoose
- >= 8.0.0, < 8.24.3
- 8.24.3
Check your project: npm ls mongoose --all
Is mongoose@8.24.3 safe to install? See the upgrade verdict →
mongoose
- >= 9.0.0, < 9.9.2
- 9.9.2
Check your project: npm ls mongoose --all
Is mongoose@9.9.2 safe to install? See the upgrade verdict →
What changed
Published in the GitHub Advisory Database as critical.