GMS-2023-3489: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

October 17, 2023

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in @seal-security/mongoose-fixed.

References

github.com/Automattic/mongoose/commit/f1efabf350522257364aa5c2cb36e441cf08f1a2
github.com/advisories/GHSA-rc4v-99cr-pjcm
github.com/ali-security/mongoose/security/advisories/GHSA-rc4v-99cr-pjcm
security.snyk.io/vuln/SNYK-JS-MONGOOSE-5777721

Detect and mitigate GMS-2023-3489 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →