{"action":"Upgrade mongodb to 3.2.5 or later.","affected":[{"fixed":"3.2.5","introduced":"0"}],"component":"mongodb","cve_ids":["CVE-2025-11695"],"ecosystem":"crates.io","epss":0.00176,"exploited":false,"fixed_versions":["3.2.5"],"ghsa_id":"GHSA-3p6w-gv5g-xjw9","id":"tcs_01M5KES12FKN97G3TPD844WMYW","modified_at":"2025-10-13T21:13:14.404300Z","published_at":"2025-10-13T18:31:13Z","references":["https://osv.dev/vulnerability/GHSA-3p6w-gv5g-xjw9","https://nvd.nist.gov/vuln/detail/CVE-2025-11695","https://github.com/mongodb/mongo-rust-driver/pull/1453","https://github.com/mongodb/mongo-rust-driver/commit/21ed6aeeea386628621b36a6af2a1a248cc87dcf","https://github.com/mongodb/mongo-rust-driver/commit/b918cd6676331c45f26dd1acd13e230aaf17fe6d","https://github.com/mongodb/mongo-rust-driver","https://jira.mongodb.org/browse/RUST-2264"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-3p6w-gv5g-xjw9","url":"https://osv.dev/vulnerability/GHSA-3p6w-gv5g-xjw9"}],"summary":"MongoDB Rust Driver has certificate validation disabled when `tlsInsecure=False` appears in connection string"}