GHSA-32jf-h775-g29h

Source

https://github.com/advisories/GHSA-32jf-h775-g29h

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/07/GHSA-32jf-h775-g29h/GHSA-32jf-h775-g29h.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-32jf-h775-g29h

Aliases

CVE-2024-6382

Published

2024-07-02T21:32:16Z

Modified

2025-10-02T21:57:21Z

Severity

6.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVSS Calculator

Summary

MongoDB Rust driver may issue unintended commands

Details

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

Database specific

{
    "cwe_ids":  [
        "CWE-228"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2025-10-02T21:35:38Z",
    "nvd_published_at":  "2024-07-02T18:15:04Z",
    "severity":  "MODERATE"
}

References

Affected packages

crates.io / mongodb

Package

Name: mongodb; View open source insights on deps.dev
Purl: pkg:cargo/mongodb

Affected ranges

Type: SEMVER
Events: Introduced

2.0.0

Fixed

2.8.2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/07/GHSA-32jf-h775-g29h/GHSA-32jf-h775-g29h.json"