Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-16266

Prototype Pollution via expandKey in mongo-object

Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey() function in util.js. An attacker can modify the JavaScript prototype chain by supplying a crafted property path containing special keys such as __proto__.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Longshotlabs
Products
Mongo-object