Skip to content
OpenAdvisories

Product · MongoDB

mongocryptd

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.2

    CSFLE and Queryable Encryption self-lookup may fail to encrypt values in subpipelines

    A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or…