p PatchFirst

GHSA-mh5c-679w-hh4r

GHSA-mh5c-679w-hh4r · Denial of Service in mongodb

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Versions of `mongodb` prior to 3.1.13 are vulnerable to Denial of Service. The package fails to properly catch an exception when a collection name is invalid and the DB does not exist, crashing the application. ## Recommendation Upgrade to version 3.1.13 or later.

Fix available

Published
Updated

Stack: node

Affected products and versions

  • mongodb npm

    Affected ranges
    • SEMVER: < 3.1.13

    Update to 3.1.13

Original sources

Check your server →