Question: What is CVE-2025-23061?
Answer: CVE-2025-23061 is a vulnerability classified as critical with a CVSS score of 9.0. It falls under CWE-94 and affects the system as follows: Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900.