| Package | Affected versions | Patched versions |
|---|---|---|
| mongodb | ≥ 7.0.0, < 7.0.31≥ 8.0.0, < 8.0.20≥ 8.2.0, < 8.2.6 | 7.0.318.0.208.2.6 |
A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free