CVE-2021-23372: Mongo-Express Project mongo-express

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash.

Affected products

• Mongo-Express Project mongo-express: any version

Published 2021-04-13. Last modified 2026-06-17.