Product by Open Source
Mongodb Go Driver
30 known vulnerabilities in Mongodb Go Driver (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
30
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-81525 | Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver | 8.1 | |
| High | CVE-2026-88025 | MongoDB C# Driver: Improper Neutralization of Special Elements in Data Query Logic | 8.3 | |
| High | CVE-2026-88024 | MongoDB Rust Driver: Improper Neutralization of Special Elements in Data Query Logic | 8.3 | |
| High | CVE-2026-88031 | GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver | 8.1 | |
| High | CVE-2026-88033 | MongoDB Java Driver: Improper Neutralization of Special Elements in Data Query Logic | 8.3 | |
| High | CVE-2026-88034 | MongoDB C++ Driver: Improper Neutralization of Special Elements in Data Query Logic | 8.3 | |
| High | CVE-2026-81522 | Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver | 8.1 | |
| High | CVE-2026-88022 | MongoDB Laravel MongoDB (PHP): Improper Neutralization of Special Elements in Data Query Logic | 7.7 | |
| High | CVE-2026-75159 | MongoDB BI Connector: Double Free | 5.9 | |
| High | CVE-2026-82052 | $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars | 6.5 | |
| High | CVE-2026-88023 | MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs | 8.3 | |
| High | CVE-2026-88028 | MongoDB Laravel MongoDB (PHP): Improper Neutralization of Special Elements in Data Query Logic | 6.5 | |
| High | CVE-2026-88030 | MongoDB Ruby Driver: Improper Neutralization of Special Elements in Data Query Logic | 8.3 | |
| High | CVE-2026-88029 | pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods | 8.3 | |
| High | CVE-2026-88036 | GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver | 8.3 | |
| High | CVE-2026-88026 | Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver | 6.5 | |
| High | CVE-2026-88032 | MongoDB Java Driver: Use After Free | 5.9 | |
| High | CVE-2026-81526 | Cross-database write redirection via unvalidated dotted database name in bulk write namespaces | 6.5 | |
| High | CVE-2026-87803 | Countly-server: Incorrect Authorization | 7.1 | |
| High | CVE-2026-88027 | MongoDB Laravel MongoDB (PHP): Improper Neutralization of Special Elements in Data Query Logic | 7.1 | |
| High | CVE-2026-81529 | Connection-option injection via unescaped settings in the canonical MongoDB URL builder | 7.1 | |
| Medium | CVE-2026-81527 | NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation | 6.5 | |
| High | CVE-2026-81521 | MongoDB GO Driver: Resource Injection | 6.5 | |
| Medium | CVE-2026-81530 | KMS master key exposure via unredacted credential serialization in driver settings string | 5.6 | |
| Medium | CVE-2026-88035 | MongoDB C Driver: Integer Overflow or Wraparound | 4.7 |