Packagist/mongodb/mongodb CVE-2021-32050: medium 4.2, EPSS 0.65%
MongoDB Driver may publish events containing authentication-related data
Action: Upgrade mongodb/mongodb to 1.9.2 or later.
composer require mongodb/mongodb:1.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.9.2 | - |
Fixed versions
| 1.9.2 |
Sources
- osv: GHSA-vxvm-qww3-2fh7
- https://nvd.nist.gov/vuln/detail/CVE-2021-32050
- https://github.com/mongodb/mongo-php-driver/pull/1235
- https://github.com/mongodb/mongo-swift-driver/pull/643
- https://github.com/mongodb/mongo-php-driver/commit/4495de8313c0d313e4dde906fc7aedf998ee3748
- https://github.com/mongodb/node-mongodb-native/commit/8c8b4c3b8c55f10fb96f63d3bbfa5d408b4ed7d0
- https://jira.mongodb.org/browse/CDRIVER-3797
- https://jira.mongodb.org/browse/CXX-2028
- https://jira.mongodb.org/browse/NODE-3356
- https://jira.mongodb.org/browse/PHPC-1869
- https://jira.mongodb.org/browse/SWIFT-1229
- https://lists.debian.org/debian-lts-announce/2025/05/msg00027.html
- https://security.netapp.com/advisory/ntap-20231006-0001
CVE-2021-32050 · published · modified · JSON