GODRIVER-4075: Unvalidated DB/collection names (quotes/NULL bytes) in MongoDB drivers

Summary of Critical Vulnerability Information Vulnerability Overview Vulnerability ID: GODRIVER-4075 Title: Validate database and collection name arguments against and NULL bytes Type: Spec Change Priority: Critical - P2 Status: Closed, Resolution: Fixed Affected Component: Collection Management Tags: spec-compliance Fixed in Version: 2.2 Scope of Impact This vulnerability relates to the driver failing to properly validate when sending database/collection names, which may lead to: - If database or collection names contain or NULL bytes, the driver may silently reinterpret these names, bypassing server-side validation - The server returns an error, but the driver does not handle it correctly Upstream Change: DRIVERS-3600 (Summary of necessary driver changes) Remediation 1. Spec and proot tests: - C POC: - Rust POC: `https://github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust-driver-github.com/mongodb/mongo-rust

Goal Reached Thanks to every supporter — we hit 100%!

GODRIVER-4075: Unvalidated DB/collection names (quotes/NULL bytes) in MongoDB drivers