| Package | Affected versions | Patched versions |
|---|---|---|
| mongodb | = 9.0.0= 9.1.0≥ 7.0.0, < 7.0.40≥ 8.0.0, < 8.0.29≥ 8.2.0, ≤ 8.2.12≥ 8.3.0, < 8.3.8 | 7.0.408.0.298.3.8 |
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free