What is GHSA-32jf-h775-g29h?

GHSA-32jf-h775-g29h is a security advisory published by GitHub Security Advisories with Medium severity. MongoDB Rust driver may issue unintended commands

Which CVE IDs does GHSA-32jf-h775-g29h cover?

GHSA-32jf-h775-g29h covers the following CVE IDs: CVE-2024-6382. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-32jf-h775-g29h?

GHSA-32jf-h775-g29h has a CVSS v3 base score of 6.4, published by GitHub Security Advisories.

Which products are affected by GHSA-32jf-h775-g29h?

GHSA-32jf-h775-g29h affects 1 product, including: rust/mongodb:\u003e= 2.0.0, \u003c 2.8.2.

GHSA-32jf-h775-g29hMediumCVSS 6.4

MongoDB Rust driver may issue unintended commands

Vendor

GitHub Security Advisories

Published

July 2, 2024

Last Modified

October 2, 2025

🔗 CVE IDs covered (1)

CVE-2024-6382 →

📋 Description

Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

🎯 Affected products1

rust/mongodb:>= 2.0.0, < 2.8.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2024-6382
https://jira.mongodb.org/browse/RUST-1881
https://github.com/mongodb/mongo-rust-driver/pull/1045
https://github.com/mongodb/mongo-rust-driver/commit/8eac3bc6dc37a6d7667ed6c1a895c224e3ff47e1
https://github.com/mongodb/mongo-rust-driver/commit/a3fe6c84ce6287348b1268f651fdac9fbed66187
https://github.com/advisories/GHSA-32jf-h775-g29h