Skip to content
OpenAdvisories

Package · Packagist

mongodb/mongodb

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-88023

    GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library

    Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authentica…

    MongoDB MongoDB PHP Library mongodb/mongodb Packagist
  • High 8.1
    CVE-2026-81525

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver

    The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into …

    MongoDB PHP Extension PHP Library php-mongodb Debian Ubuntu Packagist