node.js_driver vulnerabilities

CVEs whose affected-version data names the node.js_driver package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119179High· 7.0

3d ago

MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's data

A flaw in the connection management layer of the MongoDB Node.js driver can leave a pooled network connection in the pool for reuse while data from an earlier operation is still outstanding on it. In applications that enable an optional …

▾ TwilightMongoDB · Node.js DriverEPSS 0.30%via CVEORG