Skip to content
OpenAdvisories

Package · Alpine

mongo-c-driver

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-84969

    Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output

    A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who …

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu Alpine
  • Low 2.0
    CVE-2026-4359

    Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer

    A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.

    MongoDB MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu Alpine