{"action":"Upgrade mongodb to 3.6.10 or later.","affected":[{"fixed":"3.6.10","introduced":"3.6.0"},{"fixed":"4.17.0","introduced":"4.0.0"},{"fixed":"5.8.0","introduced":"5.0.0"}],"component":"mongodb","cve_ids":["CVE-2021-32050"],"ecosystem":"npm","epss":0.00646,"exploited":false,"fixed_versions":["3.6.10","4.17.0","5.8.0"],"ghsa_id":"GHSA-vxvm-qww3-2fh7","id":"tcs_01M5KF9KCQXC2PEDKFBDXS1QYT","modified_at":"2025-11-03T21:55:31.883495Z","published_at":"2023-08-29T18:31:53Z","references":["https://osv.dev/vulnerability/GHSA-vxvm-qww3-2fh7","https://nvd.nist.gov/vuln/detail/CVE-2021-32050","https://github.com/mongodb/mongo-php-driver/pull/1235","https://github.com/mongodb/mongo-swift-driver/pull/643","https://github.com/mongodb/mongo-php-driver/commit/4495de8313c0d313e4dde906fc7aedf998ee3748","https://github.com/mongodb/node-mongodb-native/commit/8c8b4c3b8c55f10fb96f63d3bbfa5d408b4ed7d0","https://jira.mongodb.org/browse/CDRIVER-3797","https://jira.mongodb.org/browse/CXX-2028","https://jira.mongodb.org/browse/NODE-3356","https://jira.mongodb.org/browse/PHPC-1869","https://jira.mongodb.org/browse/SWIFT-1229","https://lists.debian.org/debian-lts-announce/2025/05/msg00027.html","https://security.netapp.com/advisory/ntap-20231006-0001"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-vxvm-qww3-2fh7#npm/mongodb","url":"https://osv.dev/vulnerability/GHSA-vxvm-qww3-2fh7"}],"summary":"MongoDB Driver may publish events containing authentication-related data"}