@mongodb-js/connection-form (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @mongodb-js/connection-form, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2024-6376 — CVSS 7.0 (high): MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of ejson shell parser…