Skip to content
OpenAdvisories

Package · Go

go.mongodb.org/mongo-driver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    CVE-2026-2303

    Heap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak

    The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI sta…

    MongoDB MongoDB Go Driver kubescape kubeflow-pipelines-apiserver Azure Linux Wolfi Go
  • Medium 6.8
    CVE-2021-20329

    Specific cstrings input may not be properly validated in the Go Driver

    Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue aff…

    MongoDB MongoDB Go Driver go.mongodb.org/mongo-driver Go