Skip to content
OpenAdvisories

Package · Debian

php-mongodb

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-112368

    Unbounded Recursion in phongo_bson_visit_document/visit_array:

    An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver…

    MongoDB PHP Driver php-mongodb php-mongodb Debian Ubuntu
  • High 8.1
    CVE-2026-81525

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver

    The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into …

    MongoDB PHP Extension PHP Library php-mongodb Debian Ubuntu Packagist