npm - OSV

MAL-2026-5957

npm/@mastra/mongodb

Malicious code in @mastra/mongodb (npm) 17 Jun

No fix available

GHSA-98xf-r82g-9mhx

npm/@langchain/langgraph-checkpoint-mongodb

LangGraph has NoSQL parameter injection in MongoDBSaver, allowing cross-tenant state access 12 Jun

Fix available
Severity - 6.7 (Medium)

GHSA-p9xr-7p9p-gpqx

npm/@feathersjs/mongodb

Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter 10 Mar

Fix available
Severity - 9.3 (Critical)

MAL-2025-191517

npm/mongodb-atlas-cli-toc-generator

Malicious code in mongodb-atlas-cli-toc-generator (npm) 01 Dec 2025

No fix available

MAL-2025-191518

npm/mongodb-compass

Malicious code in mongodb-compass (npm) 01 Dec 2025

No fix available

MAL-2025-191519

npm/mongodb-stitch-server-testutils

Malicious code in mongodb-stitch-server-testutils (npm) 01 Dec 2025

No fix available

MAL-2025-191358

npm/@voiceflow/nestjs-mongodb

Malicious code in @voiceflow/nestjs-mongodb (npm) 25 Nov 2025

No fix available

MAL-2025-186432

npm/csv-mongodb-rehype-less-loader

Malicious code in csv-mongodb-rehype-less-loader (npm) 13 Nov 2025

No fix available

MAL-2025-186586

npm/dione-dorado-apollo-mongodb

Malicious code in dione-dorado-apollo-mongodb (npm) 13 Nov 2025

No fix available

MAL-2025-186955

npm/fermiparadox-mini-css-extract-plugin-andromeda-mongodb

Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb (npm) 13 Nov 2025

No fix available

MAL-2025-187160

npm/geodynamo-biosignature-crust-mongodb

Malicious code in geodynamo-biosignature-crust-mongodb (npm) 13 Nov 2025

No fix available

MAL-2025-187205

npm/graphql-karma-cluster-mongodb

Malicious code in graphql-karma-cluster-mongodb (npm) 13 Nov 2025

No fix available

MAL-2025-187252

npm/gulp-kinetic-mongodb-astrometry

Malicious code in gulp-kinetic-mongodb-astrometry (npm) 13 Nov 2025

No fix available

MAL-2025-187274

npm/hapi-cross-env-subduction-mongodb

Malicious code in hapi-cross-env-subduction-mongodb (npm) 13 Nov 2025

No fix available

MAL-2025-187414

npm/hyperion-oberon-mongodb-quantum-computing

Malicious code in hyperion-oberon-mongodb-quantum-computing (npm) 13 Nov 2025

No fix available

MAL-2025-187472

npm/ini-mongodb-got-socketio

Malicious code in ini-mongodb-got-socketio (npm) 13 Nov 2025

No fix available

Vulnerabilities