CVE-2023-3696

CriticalCVSS 9.8

Published: 17/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.01%

59th percentile - higher than 59% of all known CVEs

There is a prototype pollution vulnerability in the GitHub repository automattic/mongoose prior to version 7.3.4.

An attacker could exploit this vulnerability to modify object prototypes, potentially leading to unauthorized access or data manipulation.

It is recommended to upgrade to version 7.3.4 or later to mitigate this vulnerability.

Original NVD description (English source)

Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4.