Remote Code Execution Vulnerability in NPM mongo-express
Affected range
SEMVER: introduced 0; fixed 0.54.0Fixed versions: 0.54.0
Web-based admin interface for MongoDB
Evidence path
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
Latest version
1.1.0-rc-4
No matching published advisory returned
Known exploitation
No KEV match
Checked by exact CVE identifier
Highest advisory severity
Critical
4 active advisories
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Affected range
SEMVER: introduced 0; fixed 0.54.0Fixed versions: 0.54.0
Affected range
SEMVER: introduced 0; fixed 1.0.0-alpha.4Fixed versions: 1.0.0-alpha.4
Affected range
SEMVER: introduced 0; last affected 0.54.0Affected range
SEMVER: introduced 0; last affected 1.0.2