Skip to content
OpenAdvisories

Product · MongoDB

MongoDB.Libmongocrypt NuGet package

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    Plaintext exposure of encrypted fields via ANSI code-page corruption of database name

    A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side field-level encryption to be written without encryption. Under certain platform text-encoding configurations, an internal name conversion lose…