mongodb_client_encryption vulnerabilities

CVEs whose affected-version data names the mongodb_client_encryption package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2021-20327Medium· 6.4

5y ago

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result …

▾ Sunlitmongodb · mongodb_client_encryptionEPSS 0.20%via NVD