Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-20925
7.5
HIGHCVSS v3
Severity scale
010
Description
An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB Server v3.6 versions prior to 3.6.15 and MongoDB Server v3.4 versions prior to 3.4.24.
mongodb
NPMThe official MongoDB driver for Node.js
NPMThe official MongoDB driver for Node.js>= 3.6.0, < 3.6.15, >= 4.0.0, < 4.0.13, >= 4.2.0, < 4.2.1, >= 3.4.0, < 3.4.24NVD
@types/mongodbNPMStub TypeScript definitions entry for mongodb, which provides its own types definitions
NPMStub TypeScript definitions entry for mongodb, which provides its own types definitions>= 3.6.0, < 3.6.15, >= 4.0.0, < 4.0.13, >= 4.2.0, < 4.2.1, >= 3.4.0, < 3.4.24NVD
Docker Hub
Crates.io
RubyGems