https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 00:05:52 +0000 https://cve.radiocsirt.org/vuln/cve-2021-20331 <p><strong>Affected:</strong> MongoDB Inc. MongoDB C# Driver, mongodb c\#_driver</p> <p>Specific versions of the MongoDB C# Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as &#34;saslStart&#34;, &#34;saslContinue&#34;, &#34;isMaster&#34;, &#34;createUser&#34;, and &#34;updateUser&#34; are executed. Without due care, an application may inadvertently expose this authenticated-related information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default). This issue affects the MongoDB C# Driver v2.12 versions prior to and including 2.12.1.</p> <p><strong>Affected:</strong> MongoDB Inc. MongoDB C# Driver, mongodb c\#_driver</p> <p>Specific versions of the MongoDB C# Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when commands such as &#34;saslStart&#34;, &#34;saslContinue&#34;, &#34;isMaster&#34;, &#34;createUser&#34;, and &#34;updateUser&#34; are executed. Without due care, an application may inadvertently expose this authenticated-related information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default). This issue affects the MongoDB C# Driver v2.12 versions prior to and including 2.12.1.</p> https://cve.radiocsirt.org/vuln/cve-2021-20331