4.0.10

DATE	CVE	VULNERABILITY TITLE	RISK
2019-08-30	CVE-2019-2390	Unspecified vulnerability in Mongodb An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server to run attacker defined code as the user running the utility. local low complexity mongodb	7.8
2019-08-30	CVE-2019-2389	Improper Input Validation vulnerability in Mongodb Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. local low complexity mongodb CWE-20	4.2