{"action":"Upgrade go.mongodb.org/mongo-driver to 1.5.1 or later.","affected":[{"fixed":"1.5.1","introduced":"0"}],"component":"go.mongodb.org/mongo-driver","cve_ids":["CVE-2021-20329"],"ecosystem":"Go","epss":0.00935,"exploited":false,"fixed_versions":["1.5.1"],"ghsa_id":"GHSA-f6mq-5m25-4r72","id":"tcs_01M5KF8GBJ4JKNPWCDR4VHPBX5","modified_at":"2024-09-17T15:38:07Z","published_at":"2021-06-15T16:08:16Z","references":["https://osv.dev/vulnerability/GHSA-f6mq-5m25-4r72","https://nvd.nist.gov/vuln/detail/CVE-2021-20329","https://github.com/mongodb/mongo-go-driver/pull/622","https://github.com/mongodb/mongo-go-driver/commit/2aca31d5986a9e1c65a92264736de9fdc3b9b4ca","https://github.com/mongodb/mongo-go-driver","https://github.com/mongodb/mongo-go-driver/releases/tag/v1.5.1","https://jira.mongodb.org/browse/GODRIVER-1923","https://pkg.go.dev/vuln/GO-2021-0112"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-f6mq-5m25-4r72","url":"https://osv.dev/vulnerability/GHSA-f6mq-5m25-4r72"}],"summary":"go.mongodb.org/mongo-driver improperly validates cstrings when marshalling Go objects into BSON"}