CVE-2021-32039

Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code including and prior to version 0.7.0

• CWE-522
• CWE-522

• https://github.com/mongodb-js/vscode/releases/tag/v0.8.0Release Notes, Third Party Advisory
• https://jira.mongodb.org/browse/VSCODE-313Issue Tracking, Vendor Advisory
• https://github.com/mongodb-js/vscode/releases/tag/v0.8.0Release Notes, Third Party Advisory
• https://jira.mongodb.org/browse/VSCODE-313Issue Tracking, Vendor Advisory

Published

Jan 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32029A flaw was found in postgresql. Using an UPDATE ... RETURNIN…6.5
• CVE-2021-32030The administrator application on ASUS GT-AC2900 devices befo…9.8
• CVE-2021-32032In Trusted Firmware-M through 1.3.0, cleaning up the memory …7.5
• CVE-2021-32033Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler …4.6
• CVE-2021-32036An authenticated user without any specific authorizations ma…7.1
• CVE-2021-32037An authorized user may trigger an invariant which may result…6.5
• CVE-2021-3204SSRF in the document conversion component of Webware Webdesk…6.5
• CVE-2021-32040It may be possible to have an extremely long aggregation pip…7.5
• CVE-2021-32050Some MongoDB Drivers may erroneously publish events containi…7.5
• CVE-2021-32051Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL inj…7.5
• CVE-2021-32052In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 befo…6.1
• CVE-2021-32053JPA Server in HAPI FHIR before 5.4.0 allows a user to deny s…5.3