| Package | Affected versions | Patched versions |
|---|---|---|
| mongodb | ≥ 7.0.0, < 7.0.35≥ 8.0.0, < 8.0.24≥ 8.2.0, < 8.2.10≥ 8.3.0, < 8.3.3 | 7.0.358.0.248.2.108.3.3 |
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free