Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-18558

Низкий

ALT-PU-2026-18558: package mongo7.0 update to version 7.0.45-alt1

Источник
errata.altlinux.org
Дата публикации
19.10.2026
Дата обновления
19.10.2026
Устраненные уязвимости
5

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades mongo7.0 to version 7.0.45-alt1.

Устраненные уязвимости5

Связанные уязвимости

CVSS3: 5.4
ubuntu
27 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 5.4
nvd
27 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 5.4
debian
27 дней назад

An issue in MongoDB Server's aggregation framework can cause certain c ...

CVSS3: 5.4
github
26 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 4.3
nvd
около 1 месяца назад

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.