GMS-2023-3489: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

October 17, 2023

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in @seal-security/mongoose-fixed.

References

github.com/Automattic/mongoose/commit/f1efabf350522257364aa5c2cb36e441cf08f1a2
github.com/advisories/GHSA-rc4v-99cr-pjcm
github.com/ali-security/mongoose/security/advisories/GHSA-rc4v-99cr-pjcm
security.snyk.io/vuln/SNYK-JS-MONGOOSE-5777721

Code Behaviors & Features

Detect and mitigate GMS-2023-3489 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →