async-mongodb-session (2.1.0), chord-action (>=0.1.13, <=0.1.16) +7 more potentially affected by CVE-2024-6382 via mongodb (>=2.0.0-alpha, <=2.6.1)

mongodb CARGO version =2.0.0-alpha, =0.1.13, =0.1.13, =0.1.13, =0.2.1, =0.3.2 - mongodb-gridfs 0.2.0 - rocketauthifier 0.111.0 - sqlite2mongo 0.3.0 Source cves: CVE-2024-6382 Source advisory: OSV:GHSA-32JF-H775-G29H...

CVE-2024-6382

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2...