Vulnerabilities in MongoDB 3.6.2