admin-gp (>=1.0.0-beta <=1.0.4-beta), aspiesolutions_core (>=0.0.1-alpha+3 <=0.0.1-alpha.11) +41 more potentially affected by CVE-2021-20332 via mongodb (>=1.2.5 <=2.0.0-alpha)

mongodb CARGO version =1.2.5, =1.0.0-beta, =0.0.1-alpha+3, =1.0.0, =1.1.0, =1.6.2, =0.12.8, =0.3.0, =0.4.2, =0.1.0-pre-alpha.1, =0.1.0, =1.0.0-beta, =0.1.0, =0.3.1 and more Source cves: CVE-2021-20332 Source advisory: OSV:GHSA-4RJR-3GJ2-5CRQ...

CVE-2021-20332

Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is created. The user's logging infrastructure could then potentially ingest these events and unexpectedly leak the credential...

CVE-2021-20332 MongoDB Rust Driver may publish events containing authentication-related data to a connection pool event listener configured by an application

Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is created. The user's logging infrastructure could then potentially ingest these events and unexpectedly leak the credential...

CVE-2021-20332

CVE-2021-20332 affects the MongoDB Rust Driver. The vulnerability arises because certain driver versions may emit monitoring events during pool creation that include credentials used to authenticate connections. If a user’s logging infrastructure ingests these events, credentials could be leaked....