VYPR

mongodb-client-encryption

by MongoDB

CVEs (1)

  • CVE-2021-20327MedFeb 25, 2021
    risk 0.35cvss 6.4epss 0.00

    A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the…