MongoDB Fixes Collection-Validator Parsing Flaw in Server Releases

MongoDB issued a security advisory for SERVER-134063, a MongoDB Server flaw involving the handling (or “shredding”) of collection-validator constants during parsing. Public advisories did not assign a CVE, severity rating, technical impact, exploitation status, or attack prerequisites to the issue.

Affected versions are MongoDB Server releases earlier than 7.0.43, 8.0.32, 8.3.11, 9.0.1, and 9.1.0-rc0. The Canadian Centre for Cyber Security and Guyana National CIRT advise administrators to review MongoDB’s advisory and apply the relevant updates to affected deployments.