
MongoDB C Driver prior to 1.30.15 and 2.5.8 affected by vulnerabilities
MongoDB C Driver versions prior to 1.30.15 and 2.5.8 have vulnerabilities that can lead to data leakage and aborts.
14 stories, newest first · one card per story

MongoDB C Driver versions prior to 1.30.15 and 2.5.8 have vulnerabilities that can lead to data leakage and aborts.

The October 30 notice covers Laravel MongoDB before 5.12.0 and tells administrators to apply updates when available.

Six Langflow modules cover an auth bypass and remote code execution from 1.0.0 through 1.11.4.

Canada's Cyber Centre urges administrators to apply MongoDB updates for the C# Driver as they become available.

Unit 42 says a weak administrator password, not a new software flaw, exposed the MongoDB holding student and staff data.

Canadian Cyber Centre advisory urges updating MongoDB Go Driver before 2.9.0/2.9.2 and libmongocrypt before 1.20.5 to fix BSON parsing and KEK issues.

Truffle Security verified 543,699 credentials still active after exposure in public GitHub repositories.

Truffle Security found 543,699 still-active credentials exposed in public GitHub repositories, many years old.

Meta launched Meta Enterprise Platform and hired MongoDB CEO Chirantan Desai to lead it.

Meta is launching an enterprise unit, led by Chirantan Desai, to sell Muse AI agents and coding tools to businesses.
Meta launched an Enterprise Platform led by former MongoDB CEO CJ Desai to sell Muse AI agents to businesses.

Canada's Cyber Centre warns that multiple Mongoid and MongoDB C Driver versions have vulnerabilities.

Canadian Cyber Centre advisory AV26-918 urges patching MongoDB Server vulnerability fixed in 7.0.43, 8.0.32, 8.3.11, and 9.0.1.

Canada's Cyber Centre warns MongoDB Java Driver and Laravel MongoDB (PHP) have vulnerabilities fixed in versions 5.11.1 and 5.11.0.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views