| Package | Affected versions | Patched versions |
|---|---|---|
| mongodb | ≥ 7.0.0, < 7.0.35≥ 8.0.0, < 8.0.10≥ 8.2.0, < 8.2.10≥ 8.3.0, < 8.3.3 | 7.0.358.0.108.2.108.3.3 |
The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechanism, but rather a TeeBuffer-internal signal used solely by $facet to coordinate its sub-pipelines. When this stage is placed before $facet in a pipeline, TeeBuffer receives the unexpected PauseExecution from upstream and hits a hard invariant assertion, crashing mongod.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free