Threats tagged 'ghsa-587q-94wg-2pfp'

The MongoDB C Driver's integration with Cyrus SASL contains a heap buffer overflow vulnerability triggered during username canonicalization. This flaw occurs before any authentication or network traffic, when untrusted input is passed in the username of a MongoDB URI using the GSSAPI authentication mechanism. The vulnerability has a high severity score of 7.8 CVSS 3.1.