Skip to content

Vendor

seal-security vulnerabilities

1 published CVE affecting seal-security, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of seal-security alerts

Products

Latest seal-security CVEs

Newest publication first

  1. GHSA-rc4v-99cr-pjcm Prototype Pollution in ali-security/mongoose

    Published
    CriticalCVSS 10.0

    Impact This vulnerability causes a Prototype Pollution in document.js, through functions such as findByIdAndUpdate(). For applications using Express and EJS, this can potentially allow remote code execution. Patches The original patched version for mongoose 5.3.3 did not include...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.