mongo-driver > 1.5.1 has a CVE: https://github.com/advisories/GHSA-f6mq-5m25-4r72 mongo-driver should be upgraded to solve this issue