Description
When tlsInsecure=False appears in a connection string, certificate validation is disabled.
This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MongoDB | Rust Driver | < v3.2.5 | v3.2.5 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | mongodb | < 3.2.5 | 3.2.5 | GHSA-3p6w-gv5g-xjw9 |