VYPR

npm package

mongodb

pkg:npm/mongodb

Vulnerabilities (1)

  • CVE-2021-32050Aug 29, 2023
    affected >= 3.6.0, < 3.6.10fixed 3.6.10

    Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, a