mongodb-js-metrics@5.0.1 vulnerabilities

Shareable metric recording.

Direct Vulnerabilities

Known vulnerabilities in the mongodb-js-metrics package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Privilege Escalation

mongodb-js-metrics is a Shareable metric recording.

Affected versions of this package are vulnerable to Privilege Escalation. A malicious 3rd party with local access to the Windows machine can execute arbitrary software with the privileges of the user who is running MongoDB Compass.

How to fix Privilege Escalation?

Upgrade mongodb-js-metrics to version 6.0.0 or higher.

<6.0.0