Known Vulnerabilities for Mongodb-odm by Doctrine-project
Listed below are 1 of the newest known vulnerabilities associated with "Mongodb-odm" by "Doctrine-project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-40352 json | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL ... | Not Provided | 2026-04-17 | 2026-04-20 |
| CVE-2026-40351 json | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript ty... | Not Provided | 2026-04-17 | 2026-04-20 |
| CVE-2026-39857 json | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and prior contain an authorization bypass ... | Not Provided | 2026-04-15 | 2026-04-16 |
| CVE-2026-34163 json | FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, FastGPT's MCP (Model Context Protocol) tools endpoints (... | Not Provided | 2026-03-31 | 2026-03-31 |
| CVE-2026-33888 json | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and prior contain an authorization bypass ... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-33877 json | ApostropheCMS is an open-source Node.js content management system. Versions 4.28.0 and prior contain a timing side-channel vu... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-31827 json | Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and r... | Not Provided | 2026-03-10 | 2026-03-11 |
| CVE-2026-8431 json | An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering we... | Not Provided | 2026-05-12 | 2026-05-12 |
| CVE-2026-8336 json | After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a ... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-8202 json | Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim,... | Not Provided | 2026-05-13 | 2026-05-13 |