GHSA-mh5c-679w-hh4r
Denial of Service in mongodb
GHSA-mh5c-679w-hh4r is a vulnerability with no CVSS score yet in mongodb, published September 3, 2020. No source lists public exploit code. Fixed in mongodb 3.1.13.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.1.13mongodb
Description
Versions of mongodb prior to 3.1.13 are vulnerable to Denial of Service. The package fails to properly catch an exception when a collection name is invalid and the DB does not exist, crashing the application.
Recommendation
Upgrade to version 3.1.13 or later.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mongodbnpm | before 3.1.13 | 3.1.13 |
What each source reports
GitHub AdvisoriesNo score
Denial of Service in mongodb
Versions of mongodb prior to 3.1.13 are vulnerable to Denial of Service. The package fails to properly catch an exception when a collection name is invalid and the DB does not exist, crashing the application.
Recommendation
Upgrade to version 3.1.13 or later.
- Record
GHSA-mh5c-679w-hh4r- Updated
- 2026-11-02
OSVNo score
Denial of Service in mongodb
Versions of mongodb prior to 3.1.13 are vulnerable to Denial of Service. The package fails to properly catch an exception when a collection name is invalid and the DB does not exist, crashing the application.
Recommendation
Upgrade to version 3.1.13 or later.
- Record
GHSA-mh5c-679w-hh4r- Updated
- 2026-11-02
OSVROOT-APP-NPM-GHSA-mh5c-679w-hh4rNo score
GHSA-mh5c-679w-hh4r in mongodb - Patched by Root
Root has patched GHSA-mh5c-679w-hh4r in the mongodb package for Root:npm. Multiple fixed versions available.
- Record
ROOT-APP-NPM-GHSA-mh5c-679w-hh4r- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.