| Package | Affected versions | Patched versions |
|---|---|---|
| mongodb | = 8.3.0≥ 7.0.0, < 7.0.31≥ 8.0.0, < 8.0.20≥ 8.2.0, < 8.2.6 | 7.0.318.0.208.2.6 |
A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free