Description
All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash.
Remediation
References
https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-1085403
Related Vulnerabilities
CVE-2016-5388 Vulnerability in maven package org.apache.tomcat:tomcat
CVE-2021-3757 Vulnerability in npm package immer
CVE-2021-42697 Vulnerability in maven package com.typesafe.akka:akka-http-core_2.13
CVE-2022-24881 Vulnerability in maven package com.hccake:ballcat-codegen
CVE-2021-21120 Vulnerability in maven package org.webjars.npm:electron