MongoDB Node.js client side field level encryption library may not be validating KMS certificate

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2021-20327 · CVE overview and exploitation status

EUVD-2021-0871

GHSA-rjmf-p882-645m

cve-program · CVE-2021-20327

• https://jira.mongodb.org/browse/NODE-3125

euvd · EUVD-2021-0871

• https://jira.mongodb.org/browse/NODE-3125

nvd · CVE-2021-20327

• https://jira.mongodb.org/browse/NODE-3125

osv · GHSA-rjmf-p882-645m

• https://nvd.nist.gov/vuln/detail/CVE-2021-20327
• https://github.com/mongodb/libmongocrypt/commit/76365515ff8754b9f705e56428dd0d7efa7f541b
• https://github.com/mongodb/libmongocrypt
• https://jira.mongodb.org/browse/NODE-3125
• https://www.npmjs.com/advisories/1660

No related changes are available here.