CVE-2022-24304: False Positive

August 26, 2022 (updated August 31, 2022)

This advisory has been marked as False Positive as it is a duplicate of CVE-2022-2564

References

github.com/Automattic/mongoose/blob/51e758541763b6f14569744ced15cc23ab8b50c6/lib/schema.js
github.com/Automattic/mongoose/commit/a45cfb6b0ce0067ae9794cfa80f7917e1fb3c6f8
github.com/Automattic/mongoose/compare/6.4.5...6.4.6
nvd.nist.gov/vuln/detail/CVE-2022-24304

Code Behaviors & Features

Detect and mitigate CVE-2022-24304 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →