Skip to content
OpenAdvisories

Package · NuGet

MongoDB.Driver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.6
    CVE-2022-48282

    Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

    Under very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all Mon…

    MongoDB MongoDB .NET/C# Driver MongoDB.Driver NuGet
  • Medium 4.2
    CVE-2021-20331

    MongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an application

    Specific versions of the MongoDB C# Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "s…

    MongoDB MongoDB C Driver MongoDB.Driver NuGet