MongoDB Mongo Crypt V1 So
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in MongoDB Mongo Crypt V1 So.
By the Year
In 2026 there have been 0 vulnerabilities in MongoDB Mongo Crypt V1 So. Mongo Crypt V1 So did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 3.30 |
It may take a day or so for new Mongo Crypt V1 So vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent MongoDB Mongo Crypt V1 So Security Vulnerabilities
MongoDB Encrypted via mongocryptd $lookup Bug v5.0-5.0.28,6.0-6.0.16,7.0-7.0.11
CVE-2024-8013
3.3 - Low
- October 28, 2024
A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions.
Cleartext Transmission of Sensitive Information
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for MongoDB Mongo Crypt V1 So or by MongoDB? Click the Watch button to subscribe.
