Description
WS-2019-0311 - Medium Severity Vulnerability
Vulnerable Library - mongodb-3.1.3.tgz
The official MongoDB driver for Node.js
Library home page: https://registry.npmjs.org/mongodb/-/mongodb-3.1.3.tgz
Path to dependency file: /tmp/ws-scm/guilds.osweekends.com/package.json
Path to vulnerable library: /guilds.osweekends.com/node_modules/mongodb/package.json
Dependency Hierarchy:
- ❌ mongodb-3.1.3.tgz (Vulnerable Library)
Found in HEAD commit: f30dd7a82df3ba133df4217044d20081318714c7
Vulnerability Details
There is a Denial of Service vulnerability in mongodb before 3.1.13. The application crashes when a collection name is invalid and the DB doesn't exist.
Publish Date: 2019-12-01
URL: WS-2019-0311
CVSS 2 Score Details (5.0)
Base Score Metrics not available
Suggested Fix
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/1203
Release Date: 2019-12-01
Fix Resolution: mongodb - 3.1.13
Step up your Open Source Security Game with WhiteSource here