Skip to content
OpenAdvisories

Product · MongoDB

MongoDB C Driver

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-0437

    MongoDB client C Driver may infinitely loop when validating certain BSON input data

    When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

    MongoDB MongoDB C Driver mongo-c-driver mongo-c-driver Debian Alpine
  • Medium 4.2
    CVE-2021-32050

    Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

    Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.…

    MongoDB MongoDB C Driver MongoDB PHP Driver MongoDB Swift Driver Debian Ubuntu npm Packagist SwiftURL
  • Medium 4.2
    CVE-2021-20331

    MongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an application

    Specific versions of the MongoDB C# Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as "saslStart", "s…

    MongoDB MongoDB C Driver MongoDB.Driver NuGet