mongodb
7.7.0 · 28 Sep 2026Apache-2.08.8M / weekRepositorynpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for mongodb. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 7.7.0 | No known advisory | |
| 6.21.0 | No known advisory | |
| 5.9.2 | 3 open advisories, worst high · last release Dec 2023, no longer updated |
- HighDenial of Service in mongodbGHSA-mh5c-679w-hh4r · 3 Sep 2020
- 3.x3.0.0 – 3.1.12Fixed in 3.1.13
- 2.x and older0.9.1 – 2.2.36No fix, no longer updated · move to 3.1.13
- ModerateMongoDB Driver may publish events containing authentication-related dataGHSA-vxvm-qww3-2fh7 · 29 Aug 2023
- 5.x5.0.0 – 5.7.0Fixed in 5.8.0
- 4.x4.0.0 – 4.16.0Fixed in 4.17.0
- 3.x3.6.0 – 3.6.9Fixed in 3.6.10
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.