npm/mongodb CVE-2021-32050: medium 4.2, EPSS 0.65%
MongoDB Driver may publish events containing authentication-related data
Action: Upgrade mongodb to 3.6.10 or later.
npm i mongodb@3.6.10npm i mongodb@4.17.0npm i mongodb@5.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.6.0 | 3.6.10 | - |
| 4.0.0 | 4.17.0 | - |
| 5.0.0 | 5.8.0 | - |
Fixed versions
| 3.6.10 | 4.17.0 | 5.8.0 |
Sources
- osv: GHSA-vxvm-qww3-2fh7#npm/mongodb
- https://nvd.nist.gov/vuln/detail/CVE-2021-32050
- https://github.com/mongodb/mongo-php-driver/pull/1235
- https://github.com/mongodb/mongo-swift-driver/pull/643
- https://github.com/mongodb/mongo-php-driver/commit/4495de8313c0d313e4dde906fc7aedf998ee3748
- https://github.com/mongodb/node-mongodb-native/commit/8c8b4c3b8c55f10fb96f63d3bbfa5d408b4ed7d0
- https://jira.mongodb.org/browse/CDRIVER-3797
- https://jira.mongodb.org/browse/CXX-2028
- https://jira.mongodb.org/browse/NODE-3356
- https://jira.mongodb.org/browse/PHPC-1869
- https://jira.mongodb.org/browse/SWIFT-1229
- https://lists.debian.org/debian-lts-announce/2025/05/msg00027.html
- https://security.netapp.com/advisory/ntap-20231006-0001
CVE-2021-32050 · published · modified · JSON