CVE-2025-27413: Mongoose Uninitialized Cleanup Race

A database collection is forcefully cleared using raw schema operations (e.g., in a test or reset utility) without a corresponding synchronous re-initialization of required default configuration structures. This may lead to application panics, race conditions, or unvalidated schema states.

Provally CuratedPublic repositoryLowMedium confidenceVerifiedApache-2.0JS
greprules fetch cve-2025-27413-mongoose-uninitialized-cleanup-race --engine opengrep

Description

A database collection is forcefully cleared using raw schema operations (e.g., in a test or reset utility) without a corresponding synchronous re-initialization of required default configuration structures. This may lead to application panics, race conditions, or unvalidated schema states.