—
GO-2021-0112
Improper input validation in go.mongodb.org/mongo-driver
Quick fix
GO-2021-0112 — go.mongodb.org/mongo-driver: upgrade to the fixed version with the command below.
go get go.mongodb.org/mongo-driver@v1.5.1Details
Due to improper input sanitization when marshalling Go objects into BSON, a maliciously constructed Go structure could allow an attacker to inject additional fields into a MongoDB document. Users are affected if they use this package to handle untrusted user input.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/go.mongodb.org/mongo-driver
Introduced in:
0Fixed in: 1.5.1Fix
go get go.mongodb.org/mongo-driver@v1.5.1