MongoDB Mongocryptd
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in MongoDB Mongocryptd.
By the Year
In 2026 there have been 0 vulnerabilities in MongoDB Mongocryptd. Mongocryptd did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 3.30 |
It may take a day or so for new Mongocryptd vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent MongoDB Mongocryptd Security Vulnerabilities
MongoDB Encrypted via mongocryptd $lookup Bug v5.0-5.0.28,6.0-6.0.16,7.0-7.0.11
CVE-2024-8013
3.3 - Low
- October 28, 2024
A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryptd binary (v5.0 versions prior to 5.0.29, v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) and mongo_crypt_v1.so shared libraries (v6.0 versions prior to 6.0.17, v7.0 versions prior to 7.0.12 and v7.3 versions prior to 7.3.4) released alongside MongoDB Enterprise Server versions.
Cleartext Transmission of Sensitive Information
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for MongoDB Mongocryptd or by MongoDB? Click the Watch button to subscribe.
