PT-2026-42301 · Cleanstart · Mongosh

Publicado 2026-04-16 · Atualizado 2026-04-16

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Multiple security vulnerabilities affect the mongosh package. Axios is a promise based HTTP client for the browser and Node. See references for individual vulnerability details.

Correção

Identificadores relacionados

CLEANSTART-2026-TW25027

Produtos afetados

Mongosh

Referências · 45

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TW25027.json · Nota
• https://osv.dev/vulnerability/CVE-2026-4926 · Nota
• https://osv.dev/vulnerability/CVE-2025-25285 · Nota
• https://osv.dev/vulnerability/ghsa-j3q9-mxjg-w52f · Nota
• https://osv.dev/vulnerability/ghsa-2qvq-rjwj-gvw9 · Nota
• https://osv.dev/vulnerability/ghsa-72xf-g2v4-qvf3 · Nota
• https://osv.dev/vulnerability/ghsa-rc47-6667-2j5j · Nota
• https://osv.dev/vulnerability/ghsa-442j-39wm-28r2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-62718 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-4926 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-3mfm-83xf-c92r · Nota
• https://osv.dev/vulnerability/ghsa-7r86-cg39-jmmj · Nota
• https://osv.dev/vulnerability/CVE-2026-33937 · Nota
• https://osv.dev/vulnerability/ghsa-23c5-xmqv-rm74 · Nota
• https://osv.dev/vulnerability/CVE-2026-4923 · Nota