Vulnerability Bulletins

CVE-2025-11695

   
Affected software MONGODB
 
When tlsInsecure=False appears in a connection string, certificate validation is disabled.

This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-11695