Skip to content
OpenAdvisories

Package · npm

mongodb

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.2
    CVE-2021-32050

    Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

    Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.…

    MongoDB MongoDB C Driver MongoDB PHP Driver MongoDB Node.js Driver Debian Ubuntu npm Packagist SwiftURL
  • High —
    GHSA-mh5c-679w-hh4r

    Denial of Service in mongodb

    Versions of `mongodb` prior to 3.1.13 are vulnerable to Denial of Service. The package fails to properly catch an exception when a collection name is invalid and the DB does not exist, crashing the application. ## Recommendation Upgrade to version 3.1.13 or l…

    mongodb npm