Product by Open Source
Mongodb For Vs Code
7 known vulnerabilities in Mongodb For Vs Code (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-84964 | Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client | 5.9 | |
| Medium | CVE-2026-84963 | Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser | 5.3 | |
| Medium | CVE-2026-84968 | Heap out-of-bounds read via corrupt nested BSON in field path error message | 5.3 | |
| Medium | CVE-2026-84966 | BSON element injection via NUL-embedded document keys in builder append | 5.1 | |
| Medium | CVE-2026-84965 | Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds | 5.1 | |
| Medium | CVE-2026-84962 | Authenticated KMS request forgery via CRLF injection in GCP key identifier strings | 4.2 | |
| Medium | CVE-2026-84967 | Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal | 4.3 |