MongoDB.Driver Version="2.14.1 in net 8 is vulnerable ? why ?

Dani_S 4,501 Reputation points
2023-11-26T15:22:53.5566667+00:00

Hi.

I convert my project to NET 8 and I got that this package is vulnerable? why ?

My maui app use it from class lib that there the mongo is installed.

Thanks in adanvce,

  <PackageReference Include="MongoDB.Driver" Version="2.14.1" />

Developer technologies | .NET | .NET MAUI
Developer technologies | .NET | Other
{count} votes

Accepted answer
  1. Bruce (SqlWork.com) 77,686 Reputation points Volunteer Moderator
    2023-11-26T17:06:51.55+00:00

    If you go to the nuget page:

    https://www.nuget.org/packages/MongoDB.Driver/2.14.1

    it lists the vulnerability as:

    https://github.com/advisories/GHSA-7j9m-j397-g4wx

    note: why are you using such an old version?

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.