Vulnerabilities in MongoDB Inc.
68 resultsCVE-2021-20328MEDIUMMongoDB Java driver client-side field level encryption not verifying KMS host nameEPSS 0.4%CVE-2026-93759HIGHServer-side JavaScript injection via string query criteria bypassing the strict operator allowlistEPSS 0.4%CVE-2026-93395MEDIUMInteger Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()EPSS 0.4%CVE-2025-12657MEDIUMMalformed KMIP response may result in access violationEPSS 0.4%CVE-2026-6811MEDIUMPHP Stack ExhaustionEPSS 0.4%CVE-2021-20334MEDIUMLocal privilege escalation in MongoDB Compass for WindowsEPSS 0.4%CVE-2026-93758HIGHCross-principal document update, theft, and deletion via unvalidated id in nested attributesEPSS 0.4%CVE-2025-13644HIGHMongoDB may be susceptible to Invariant Failure due to batched deleteEPSS 0.3%CVE-2026-93394MEDIUMlibmongoc SCRAM client nonce-validation bypassEPSS 0.3%CVE-2021-20332MEDIUMMongoDB Rust Driver may publish events containing authentication-related data to a connection pool event listener configured by an applicationEPSS 0.3%CVE-2025-13507HIGHTime-series operations may cause internal BSON size limit to be exceedEPSS 0.3%CVE-2019-2389MEDIUMProcess termination via PID file manipulationEPSS 0.3%CVE-2021-32039MEDIUMMongoDB Extension for VS Code may unexpectedly store credentials locally in clear textEPSS 0.3%CVE-2025-11979MEDIUMUse-after-free in the MongoDB server query planner may lead to crash or undefined behaviorEPSS 0.3%CVE-2026-112368HIGHUnbounded Recursion in phongo_bson_visit_document/visit_array:EPSS 0.3%CVE-2025-13643LOWMongoDB Server may allow queries to be terminated by unauthorized usersEPSS 0.2%CVE-2026-8063HIGHPost-auth null pointer dereference when aggregating against a view with empty search pipelineEPSS 0.2%CVE-2025-14345LOWCross-Shard Failovers May Lead to Partial Transaction Commit in MongoDB ServerEPSS 0.2%CVE-2021-20327MEDIUMMongoDB Node.js client side field level encryption library may not be validating KMS certificateEPSS 0.2%CVE-2026-6231MEDIUMbson_validate may skip validation when processing certain inputsEPSS 0.2%