Lucene search
K

11 matches found

Github Security Blog
Github Security Blog
added 2025/10/13 6:31 p.m.12 views

MongoDB Rust Driver has certificate validation disabled when `tlsInsecure=False` appears in connection string

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8CVSS6.8AI score0.00026EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/10/13 6:31 p.m.5 views

GHSA-3P6W-GV5G-XJW9 MongoDB Rust Driver has certificate validation disabled when `tlsInsecure=False` appears in connection string

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8CVSS6.8AI score0.00026EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/13 6:31 p.m.3 views

EUVD-2025-34070

MongoDB Rust Driver has certificate validation disabled when tlsInsecure=False appears in connection string...

8CVSS6.5AI score0.00026EPSS
Exploits0References5
OSV
OSV
added 2025/10/13 5:15 p.m.1 views

CVE-2025-11695

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

7.5CVSS6.7AI score
Exploits0References1
NVD
NVD
added 2025/10/13 5:15 p.m.2 views

CVE-2025-11695

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8CVSS0.00026EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/13 4:22 p.m.5 views

CVE-2025-11695 Configuration may unexpectedly disable certificate validation

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8CVSS0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/13 4:22 p.m.2 views

CVE-2025-11695 Configuration may unexpectedly disable certificate validation

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8CVSS6.4AI score0.00026EPSS
Exploits0References1
MongoDB
MongoDB
added 2025/10/13 4:22 p.m.7 views

Configuration may unexpectedly disable certificate validation

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...

8CVSS6.8AI score0.00026EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/13 12:0 a.m.5 views

PT-2025-41792

Name of the Vulnerable Software and Affected Versions MongoDB Rust Driver versions prior to 3.2.5 Description The MongoDB Rust Driver is affected by an issue where setting tlsInsecure=False in a connection string disables certificate validation. Normally, this parameter should enforce strict TLS...

8CVSS6.4AI score0.00026EPSS
Exploits0References14
OSV
OSV
added 2023/07/08 11:5 a.m.2 views

OESA-2023-1401 perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: HTTP::Tiny before 0.083, a Perl core...

8.1CVSS6.9AI score0.00767EPSS
Exploits0References2
OSV
OSV
added 2020/04/24 2:15 p.m.2 views

CVE-2020-5869

In BIG-IQ 5.2.0-7.0.0, high availability HA synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit...

9.1CVSS7.3AI score0.00288EPSS
Exploits0References1
Rows per page
Query Builder