Vulnerabilities

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Se…

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage…

A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations.

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not in…

A use-after-free security issue exists in the server's query execution memory tracking subsystem.

A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process.

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference.