{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amongodbnode_js_driver/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mongodb:node_js_driver:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7,"id":"CVE-2026-119179"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-119179\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["MongoDB Node.js driver"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["MongoDB"],"content_html":"\u003cp\u003eA flaw in the connection management layer of the MongoDB Node.js driver can leave a pooled network connection in the pool for reuse while data from an earlier operation is still outstanding. In applications that enable an optional client-side operation timeout, an unauthenticated party can cause database replies to be paired with the wrong requests. This may result in the unintended disclosure of other users' records, incorrect operation results, or failures of legitimate requests.\u003c/p\u003e\n","date_modified":"2026-11-03T16:15:02Z","date_published":"2026-11-03T16:00:48Z","id":"https://feed.craftedsignal.io/briefs/2026-11-mongodb-nodejs-driver-vulnerability/","summary":"A flaw in the connection management layer of the MongoDB Node.js driver allows for unintended data disclosure, incorrect operation results, and request failures when client-side operation timeouts are enabled.","title":"MongoDB Node.js Driver: Connection Management Data Disclosure (CVE-2026-119179)","url":"https://feed.craftedsignal.io/briefs/2026-11-mongodb-nodejs-driver-vulnerability/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:mongodb:node_js_driver:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}