{"action":"Upgrade mongodb/mongodb to 1.9.2 or later.","affected":[{"fixed":"1.9.2","introduced":"1.0.0"}],"component":"mongodb/mongodb","cve_ids":["CVE-2021-32050"],"ecosystem":"Packagist","epss":0.00646,"exploited":false,"fixed_versions":["1.9.2"],"ghsa_id":"GHSA-vxvm-qww3-2fh7","id":"tcs_01M5KF9KB4KD02MF0EHMEWG79W","modified_at":"2025-11-03T21:55:31.883495Z","published_at":"2023-08-29T18:31:53Z","references":["https://osv.dev/vulnerability/GHSA-vxvm-qww3-2fh7","https://nvd.nist.gov/vuln/detail/CVE-2021-32050","https://github.com/mongodb/mongo-php-driver/pull/1235","https://github.com/mongodb/mongo-swift-driver/pull/643","https://github.com/mongodb/mongo-php-driver/commit/4495de8313c0d313e4dde906fc7aedf998ee3748","https://github.com/mongodb/node-mongodb-native/commit/8c8b4c3b8c55f10fb96f63d3bbfa5d408b4ed7d0","https://jira.mongodb.org/browse/CDRIVER-3797","https://jira.mongodb.org/browse/CXX-2028","https://jira.mongodb.org/browse/NODE-3356","https://jira.mongodb.org/browse/PHPC-1869","https://jira.mongodb.org/browse/SWIFT-1229","https://lists.debian.org/debian-lts-announce/2025/05/msg00027.html","https://security.netapp.com/advisory/ntap-20231006-0001"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-vxvm-qww3-2fh7","url":"https://osv.dev/vulnerability/GHSA-vxvm-qww3-2fh7"}],"summary":"MongoDB Driver may publish events containing authentication-related data"}