Vulnerabilities in MongoDB 3.6.0