VYPR

Bson Objectid

by Bson Objectid Project

CVEs (1)

  • CVE-2019-19729HigDec 11, 2019
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by inserting an additional property to the user-input, because bson-objectid will return early if it detects…