prehistoric-systems/github-drama
1
0
Fork 0
mirror of https://github.com/neodrama/github-drama.git synced 2026-03-11 08:54:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update MongoDB Christmas 2025 CVE drama

Browse source
This commit is contained in:
coralsundy 2025-12-30 00:41:22 -05:00 committed by GitHub
parent 52bd4677b1
commit 35f6577161
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
README.md
View file

@ -636,6 +636,11 @@ minio/minio - MinIO (apparently) becomes source-only (disabled docker release ri
[moment/moment/issues/1407](https://github.com/moment/moment/issues/1407)
MongoBleed - A MongoDB High CVE (8.7) disclosed on 12/19/2025:
* The tech lead of Elastic Security published a POC of the CVE right on Christmas day of 2025: https://github.com/joe-desimone/mongobleed/issues/4
* People found out the PR that cause this CVE back in 2017: https://github.com/mongodb/mongo/pull/1152#issuecomment-3695333733
* HackerNews: https://news.ycombinator.com/item?id=46414475
moq/moq - Privacy issues with SponsorLink
* [issues/1370](https://github.com/moq/moq/issues/1370)
* [issues/1372](https://github.com/moq/moq/issues/1372)