Repository navigation
Security: mongodb/node-mongodb-native
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Attacker able to redirect a client's database traffic to a host they control via special characters in an SRV target, bypassing the SRV parent-domain guardGHSA-qmhq-mh7j-xr7c published
Nov 12, 2026 by dariakpCritical -
OIDC ENVIRONMENT confusion bypasses ALLOWED_HOSTS and leaks human-callback bearer tokensGHSA-c5cf-gf4q-92vj published
Nov 12, 2026 by dariakpModerate -
Experimental timeoutMS feature: Connection pool desynchronization after operation timeout can expose other users' dataGHSA-77w5-j825-v4qm published
Nov 3, 2026 by dariakpHigh
Learn more about advisories related to mongodb/node-mongodb-native in the GitHub Advisory Database