Skip to content
OpenAdvisories

Package · Packagist

mongodb/mongodb

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.3
    CVE-2026-88023

    GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library

    Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authentica…

    MongoDB MongoDB PHP Library mongodb/mongodb Packagist
  • High 8.1
    CVE-2026-81525

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver

    The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into …

    MongoDB PHP Extension PHP Library php-mongodb Debian Ubuntu Packagist
  • Medium 4.2
    CVE-2021-32050

    Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

    Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.…

    MongoDB MongoDB C Driver MongoDB PHP Driver MongoDB Swift Driver Debian Ubuntu npm Packagist SwiftURL