{"api_version":"v1","generated_at":"2026-10-08T05:30:00+00:00","product":{"cve_count":19,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-cesanta-mongoose-eebc919a3448","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/mongoose","name":"mongoose","next_cursor":null,"observations":[{"affected":"Mongoose: 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 7.10, 7.11, 7.12, 7.13, 7.14, 7.15, 7.16, 7.17, 7.18, 7.19, 7.20, 7.21","affected_versions_present":true,"cve_id":"CVE-2026-101003","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-101003","fixed":"Mongoose: 7.22","last_modified":"2026-10-01T14:06:48.183Z","patch_url":"https://vuldb.com/vuln/410873","primary_source":"","published":"2026-09-28T05:30:14.021Z"},{"affected":"mongoose: < 7.22","affected_versions_present":true,"cve_id":"CVE-2026-73253","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73253","fixed":"7.22.","last_modified":"2026-08-20T18:36:17.262Z","patch_url":"https://github.com/cesanta/mongoose/pull/3611","primary_source":"","published":"2026-08-20T17:41:02.495Z"},{"affected":"mongoose: < 7.22","affected_versions_present":true,"cve_id":"CVE-2026-73255","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73255","fixed":"7.22.","last_modified":"2026-08-25T15:09:33.679Z","patch_url":"https://github.com/cesanta/mongoose/pull/3611","primary_source":"","published":"2026-08-20T17:40:02.443Z"},{"affected":"mongoose: < 7.22","affected_versions_present":true,"cve_id":"CVE-2026-73259","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73259","fixed":"7.22.","last_modified":"2026-08-20T19:51:19.095Z","patch_url":"https://github.com/cesanta/mongoose/pull/3611","primary_source":"","published":"2026-08-20T17:39:16.147Z"},{"affected":"mongoose: < 7.22","affected_versions_present":true,"cve_id":"CVE-2026-73256","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73256","fixed":"7.22.","last_modified":"2026-08-21T21:46:47.832Z","patch_url":"https://github.com/cesanta/mongoose/pull/3611","primary_source":"","published":"2026-08-20T17:37:54.505Z"},{"affected":"mongoose: < 7.22","affected_versions_present":true,"cve_id":"CVE-2026-73254","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73254","fixed":"7.22.","last_modified":"2026-08-21T16:22:13.424Z","patch_url":"https://github.com/cesanta/mongoose/pull/3611","primary_source":"","published":"2026-08-20T17:37:17.245Z"},{"affected":"mongoose: < 7.22","affected_versions_present":true,"cve_id":"CVE-2026-73258","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73258","fixed":"7.22.","last_modified":"2026-08-20T18:32:51.938Z","patch_url":"https://github.com/cesanta/mongoose/pull/3611","primary_source":"","published":"2026-08-20T17:36:39.239Z"},{"affected":"mongoose: < 7.23","affected_versions_present":true,"cve_id":"CVE-2026-73251","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73251","fixed":"7.23.","last_modified":"2026-08-20T19:50:32.555Z","patch_url":"https://github.com/cesanta/mongoose/commit/2988bc9df3a5efc9539471cb7455975fa25df483","primary_source":"","published":"2026-08-20T17:34:50.472Z"},{"affected":"mongoose: < 7.22","affected_versions_present":true,"cve_id":"CVE-2026-73257","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73257","fixed":"7.22.","last_modified":"2026-08-20T19:34:58.840Z","patch_url":"https://github.com/cesanta/mongoose/pull/3611","primary_source":"","published":"2026-08-20T17:30:58.424Z"},{"affected":"< 7.22","affected_versions_present":true,"cve_id":"CVE-2026-11404","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-11404","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-29T13:38:25.855Z","patch_url":"","primary_source":"","published":"2026-07-09T15:13:40.148Z"},{"affected":"7.0; 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; 7.7","affected_versions_present":true,"cve_id":"CVE-2026-6986","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-6986","fixed":"7.21","last_modified":"2026-04-27T13:36:06.578Z","patch_url":"https://vuldb.com/vuln/359529","primary_source":"","published":"2026-04-25T16:30:13.067Z"},{"affected":"7.0; 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; 7.7","affected_versions_present":true,"cve_id":"CVE-2026-6985","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-6985","fixed":"7.21","last_modified":"2026-04-27T12:35:36.821Z","patch_url":"https://vuldb.com/vuln/359528","primary_source":"","published":"2026-04-25T16:15:13.639Z"},{"affected":"7.0; 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; 7.7","affected_versions_present":true,"cve_id":"CVE-2026-5246","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-5246","fixed":"7.21","last_modified":"2026-04-02T13:07:02.788Z","patch_url":"https://github.com/cesanta/mongoose/commit/0d882f1b43ff2308b7486a56a9d60cd6dba8a3f1","primary_source":"","published":"2026-04-02T09:45:11.602Z"},{"affected":"7.0; 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; 7.7","affected_versions_present":true,"cve_id":"CVE-2026-5245","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-5245","fixed":"7.21","last_modified":"2026-04-02T14:27:27.092Z","patch_url":"https://github.com/cesanta/mongoose/commit/0d882f1b43ff2308b7486a56a9d60cd6dba8a3f1","primary_source":"","published":"2026-04-02T09:00:19.688Z"},{"affected":"7.0; 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; 7.7","affected_versions_present":true,"cve_id":"CVE-2026-5244","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-5244","fixed":"7.21","last_modified":"2026-04-02T13:31:54.915Z","patch_url":"https://github.com/cesanta/mongoose/commit/0d882f1b43ff2308b7486a56a9d60cd6dba8a3f1","primary_source":"","published":"2026-04-02T08:00:19.770Z"},{"affected":"7.0; 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; 7.7","affected_versions_present":true,"cve_id":"CVE-2026-2968","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-2968","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-23T17:26:53.648Z","patch_url":"","primary_source":"","published":"2026-02-23T03:02:07.673Z"},{"affected":"7.0; 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; 7.7","affected_versions_present":true,"cve_id":"CVE-2026-2967","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-2967","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-23T13:32:57.830Z","patch_url":"","primary_source":"","published":"2026-02-23T02:32:07.568Z"},{"affected":"7.0; 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; 7.7","affected_versions_present":true,"cve_id":"CVE-2026-2966","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-2966","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-23T13:36:51.905Z","patch_url":"","primary_source":"","published":"2026-02-23T02:02:08.202Z"},{"affected":"7.10","affected_versions_present":true,"cve_id":"CVE-2023-2905","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-2905","fixed":"7.11","last_modified":"2024-10-10T14:56:29.619Z","patch_url":"https://takeonme.org/cves/CVE-2023-2905.html","primary_source":"","published":"2023-08-09T04:46:14.972Z"},{"affected":"6.8","affected_versions_present":true,"cve_id":"CVE-2017-2922","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2922","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T18:59:36.372Z","patch_url":"","primary_source":"","published":"2017-11-07T16:00:00.000Z"},{"affected":"6.8","affected_versions_present":true,"cve_id":"CVE-2017-2921","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2921","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T22:56:25.193Z","patch_url":"","primary_source":"","published":"2017-11-07T16:00:00.000Z"},{"affected":"6.8","affected_versions_present":true,"cve_id":"CVE-2017-2909","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2909","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T03:17:47.948Z","patch_url":"","primary_source":"","published":"2017-11-07T16:00:00.000Z"},{"affected":"6.8","affected_versions_present":true,"cve_id":"CVE-2017-2895","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2895","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T04:03:40.144Z","patch_url":"","primary_source":"","published":"2017-11-07T16:00:00.000Z"},{"affected":"6.8","affected_versions_present":true,"cve_id":"CVE-2017-2894","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2894","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T02:16:55.574Z","patch_url":"","primary_source":"","published":"2017-11-07T16:00:00.000Z"},{"affected":"6.8","affected_versions_present":true,"cve_id":"CVE-2017-2893","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2893","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T00:51:27.255Z","patch_url":"","primary_source":"","published":"2017-11-07T16:00:00.000Z"},{"affected":"6.8","affected_versions_present":true,"cve_id":"CVE-2017-2892","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2892","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T23:51:31.977Z","patch_url":"","primary_source":"","published":"2017-11-07T16:00:00.000Z"},{"affected":"6.8","affected_versions_present":true,"cve_id":"CVE-2017-2891","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-2891","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T22:52:04.709Z","patch_url":"","primary_source":"","published":"2017-11-07T16:00:00.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"cesanta"}}