| Package | Affected versions | Patched versions |
|---|---|---|
| mongodb | ≥ 7.0.0, < 7.0.32≥ 8.0.0, < 8.0.21≥ 8.2.0, < 8.2.6 | 7.0.328.0.218.2.6 |
Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryable_encrypted_range" indices. This issue affects MongoDB Server v7.0 versions prior to 7.0.32, v8.0 versions prior to 8.0.21 and v8.2 versions prior to 8.2.6
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free