medium6.5
CVE-2026-55369Fix available
Waline login accepts a non-string email as a match-all MongoDB query
@waline/vercel npm
| Affected range | Recorded fix |
|---|---|
| Earlier releases before 1.41.0Semantic versions | 1.41.0 |
Version evidence: OSV · GHSA-jf75-q64q-g65r
View original version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.41.0"
}
],
"type": "SEMVER"
}
],
"versions": []
}