CVE-2021-20329
2 advisories.
Go/go.mongodb.org/mongo-driver CVE-2021-20329: medium 6.8, EPSS 0.94%
go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON
Action: Upgrade go.mongodb.org/mongo-driver to 1.5.1 or later.
go get go.mongodb.org/mongo-driver@v1.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.1 | - |
Fixed versions
| 1.5.1 |
Sources
- osv: GHSA-f6mq-5m25-4r72
- https://nvd.nist.gov/vuln/detail/CVE-2021-20329
- https://github.com/mongodb/mongo-go-driver/pull/622
- https://github.com/mongodb/mongo-go-driver/commit/2aca31d5986a9e1c65a92264736de9fdc3b9b4ca
- https://github.com/mongodb/mongo-go-driver
- https://github.com/mongodb/mongo-go-driver/releases/tag/v1.5.1
- https://jira.mongodb.org/browse/GODRIVER-1923
- https://pkg.go.dev/vuln/GO-2021-0112
CVE-2021-20329 · published · modified · JSON
Go/go.mongodb.org/mongo-driver CVE-2021-20329: unknown, EPSS 0.94%
Improper input validation in go.mongodb.org/mongo-driver
Action: Upgrade go.mongodb.org/mongo-driver to 1.5.1 or later.
go get go.mongodb.org/mongo-driver@v1.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.1 | - |
Fixed versions
| 1.5.1 |
Sources
- osv: GO-2021-0112
- https://github.com/mongodb/mongo-go-driver/pull/622
- https://github.com/mongodb/mongo-go-driver/commit/2aca31d5986a9e1c65a92264736de9fdc3b9b4ca
- https://jira.mongodb.org/browse/GODRIVER-1923
CVE-2021-20329 · published · modified · JSON