{"ecosystem":"npm","package":"mongoose","tool_id":"npm:mongoose","listed":true,"list_version":"2026-11-05","as_of":"2026-11-05T14:51:09.638Z","version":"9.12.0","version_source":"registry_latest","security_status":"clear","status_basis":"no_match_on_version","verdict":"insufficient","advisories":{"source":"osv","checked":true,"checked_at":"2026-11-05T13:56:10.952Z","matching_version":0,"other_versions":9,"any_version":9,"malicious_records":0,"exploited_in_wild":0,"list":[{"id":"GHSA-664h-wqgq-64gw","kind":"vulnerability","aliases":["BIT-mongoose-2026-73562","CVE-2026-73562"],"affects_version":false,"fixed":["6.13.10","7.8.10","8.24.1","9.7.2"],"published":"2026-07-24T16:22:34Z","url":"https://osv.dev/vulnerability/GHSA-664h-wqgq-64gw"},{"id":"GHSA-wpg9-53fq-2r8h","kind":"vulnerability","aliases":["BIT-mongoose-2026-42334","CVE-2026-42334"],"affects_version":false,"fixed":["6.13.9","7.8.9","8.22.1","9.1.6"],"published":"2026-05-05T21:48:06Z","url":"https://osv.dev/vulnerability/GHSA-wpg9-53fq-2r8h"},{"id":"GHSA-m7xq-9374-9rvx","kind":"vulnerability","aliases":["BIT-mongoose-2024-53900","CVE-2024-53900"],"affects_version":false,"fixed":["8.8.3","7.8.3","6.13.5","5.13.23"],"published":"2024-12-02T21:31:20Z","url":"https://osv.dev/vulnerability/GHSA-m7xq-9374-9rvx"},{"id":"GHSA-vg7j-7cwx-8wgw","kind":"vulnerability","aliases":["BIT-mongoose-2025-23061","CVE-2025-23061"],"affects_version":false,"fixed":["8.9.5","7.8.4","6.13.6"],"published":"2025-01-15T06:30:49Z","url":"https://osv.dev/vulnerability/GHSA-vg7j-7cwx-8wgw"},{"id":"GHSA-h8hf-x3f4-xwgp","kind":"vulnerability","aliases":["CVE-2022-24304"],"affects_version":false,"fixed":["6.4.6","5.13.15"],"published":"2022-08-27T00:00:54Z","url":"https://osv.dev/vulnerability/GHSA-h8hf-x3f4-xwgp"},{"id":"GHSA-r5xw-q988-826m","kind":"vulnerability","aliases":[],"affects_version":false,"fixed":["3.8.39","4.3.6"],"published":"2020-09-01T19:39:37Z","url":"https://osv.dev/vulnerability/GHSA-r5xw-q988-826m"},{"id":"GHSA-9m93-w8w6-76hh","kind":"vulnerability","aliases":["BIT-mongoose-2023-3696","CVE-2023-3696"],"affects_version":false,"fixed":["7.3.3","6.11.3","5.13.20"],"published":"2023-07-17T03:30:20Z","url":"https://osv.dev/vulnerability/GHSA-9m93-w8w6-76hh"},{"id":"GHSA-f825-f98c-gj3g","kind":"vulnerability","aliases":["BIT-mongoose-2022-2564","CVE-2022-2564"],"affects_version":false,"fixed":["6.4.6","5.13.15"],"published":"2022-07-29T00:00:18Z","url":"https://osv.dev/vulnerability/GHSA-f825-f98c-gj3g"},{"id":"GHSA-8687-vv9j-hgph","kind":"vulnerability","aliases":["CVE-2019-17426"],"affects_version":false,"fixed":["5.7.5","4.13.21"],"published":"2019-10-22T20:19:54Z","url":"https://osv.dev/vulnerability/GHSA-8687-vv9j-hgph"}],"list_url":"https://osv.dev/list?ecosystem=npm&q=mongoose"},"field_reports":{"on_version":0,"outcomes":null,"people":0,"verified_people":0,"forge_score":null,"all_versions":0,"versions_reported":[],"tool_page_url":null},"skill_scan":null,"other_versions_flagged":[],"check":{"tool":"forge_check","mcp_server":"https://theagentforge.io/mcp/public","arguments":{"id":"npm:mongoose","version":"9.12.0"},"rest_url":"https://theagentforge.io/api/v1/check?id=npm%3Amongoose&version=9.12.0","cli":"npx @theagentforge/cli check npm:mongoose@9.12.0"},"sources":{"osv":"https://osv.dev/list?ecosystem=npm&q=mongoose","registry":"https://www.npmjs.com/package/mongoose","methodology":"https://theagentforge.io/methodology"},"page_url":"https://theagentforge.io/is-it-safe/npm/mongoose","markdown_url":"https://theagentforge.io/is-it-safe/npm/mongoose.md"}