Java Driver 5.9.2 (August 11, 2026)
·
1 commit
to 5.9.x
since this release
What's Changed
Warning
Starting from driver version 4.11.0, ProxySettings.toString() included the SOCKS5 proxy username and password in application logs.
See JAVA-6266 / CVE-2026-18710
The username and password are no longer included in toString() starting in this release.
If you cannot upgrade, set the org.mongodb.driver.client logger to WARN or higher to suppress the client-construction message. We do not recommend this as a long-term measure: it silences diagnostic information that is valuable for support, and it does not remove credentials already written to existing logs.
Full Changelog: r5.9.1...r5.9.2