Skip to content
OpenAdvisories

Package · Debian

mongo-java-driver

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-118581

    NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol

    A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's self-declared length agrees with the extent of the byte range it is given before that range is copied into an outgoing database command. An applica…

    MongoDB Java Driver mongo-java-driver Debian
  • Medium 5.9
    CVE-2026-88032

    Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

    A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operat…

    MongoDB Java Driver org.mongodb:mongodb-driver-reactivestreams Maven package org.mongodb:mongodb-crypt Maven package Debian Ubuntu