What is GHSA-93h4-p6c6-58pw?

GHSA-93h4-p6c6-58pw is a security advisory published by GitHub Security Advisories with Medium severity. MongoDB server may log authentication parameters, including credentials, to the server log during...

Which CVE IDs does GHSA-93h4-p6c6-58pw cover?

GHSA-93h4-p6c6-58pw covers the following CVE IDs: CVE-2026-9735. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-93h4-p6c6-58pw?

GHSA-93h4-p6c6-58pw has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

GHSA-93h4-p6c6-58pwMediumCVSS 5.5

MongoDB server may log authentication parameters, including credentials, to the server log during...

Vendor

GitHub Security Advisories

Published

June 10, 2026

Last Modified

June 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-9735 →

📋 Description

MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-9735
https://jira.mongodb.org/browse/SERVER-126506
https://github.com/advisories/GHSA-93h4-p6c6-58pw