DRIVERS-3600: Summary of necessary driver changes Return error if "." is used in a database name. Return error if NUL is used in a database or collection name. Implement prose tests. This addresses a possible driver bug: a driver's encoding of database/collection may silently re-interpret the sent database/collection and bypass server validation. If a driver already passes the database and collection names as-is to the server, the server returns an error, and there is no driver bug. Commits for syncing spec/prose tests (and/or refer to an existing language POC if needed) PRs are currently in private forks in GitHub Security Advisories. Spec and prose tests: https://github.com/mongodb/specifications-ghsa-5fvv-9555-ggcp/pull/1 C POC: https://github.com/mongodb/mongo-c-driver-ghsa-c9qr-rh56-vvrc/pull/1 Rust POC: https://github.com/mongodb/mongo-rust-driver-ghsa-rx97-q5cv-gv89/pull/2 Context for other referenced/linked tickets SECBUG-4155 tracks the original report in PHP. A separate SECBUG is expected for each affected driver.