Vendor/product archive

mongodb / rust_driver CVEs

Beta · best-effort

3 CVEs tagged to mongodb / rust_driver — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to mongodb vendor archive

CVE-2025-11695

Published Oct 13, 2025

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5

CVSS 8.0 · High

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2024-6382

Published Jul 2, 2024

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including dat…

CVSS 6.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-20332

Published Aug 2, 2021

Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is crea…

CVSS 4.2 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1