Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-16077

mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

Description

mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HackerOne mongose node module

  • All versionsaffected

References