Description
All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash.
Remediation
References
https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-1085403
Related Vulnerabilities
CVE-2018-3774 Vulnerability in npm package url-parse
CVE-2016-10685 Vulnerability in npm package pk-app-wonderbox
CVE-2023-46122 Vulnerability in maven package org.scala-sbt:io_3
CVE-2018-1230 Vulnerability in maven package org.springframework.batch:spring-batch-admin
CVE-2018-20677 Vulnerability in maven package org.webjars.npm:bootstrap-sass