mongoose is quite a popular javascript library for accessing mongodb.

a new vulnerability was discovered a few days ago where prototype pollutions were easily possible