crates.io/mongodb CVE-2021-20332: medium 4.4, EPSS 0.31%
Exposure of Sensitive Information to an Unauthorized Actor in MongoDB Rust Driver
Action: Upgrade mongodb to 2.0.0-beta or later.
cargo update -p mongodb --precise 2.0.0-betaAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 2.0.0-beta | - |
Fixed versions
| 2.0.0-beta |
Sources
- osv: GHSA-4rjr-3gj2-5crq
- https://nvd.nist.gov/vuln/detail/CVE-2021-20332
- https://github.com/mongodb/mongo-rust-driver/commit/9e8782b1bb1104e5399c073b553719c262d4463c
- https://github.com/mongodb/mongo-rust-driver
- https://jira.mongodb.org/browse/RUST-591
CVE-2021-20332 · published · modified · JSON